RHSA-2026:91001 - Security Advisory

Topic

The jboss-webserver/jws-rhel9-operator:2.3.4 container image is now available.

Description

The jboss-webserver/jws-rhel9-operator 2.3.4 container image replaces the jboss-webserver/jws5-rhel9-operator 2.3.3 container. This new container image contains CVE fixes.

Users of jboss-webserver/jws5-rhel9-operator container images are advised to upgrade to these updated images.

Solution

You can download the RHEL-9-based Middleware Containers container image that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).

Dockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.

Affected Products

• Red Hat JBoss Middleware 1 x86_64

Fixes

CVEs

• CVE-2026-5437
• CVE-2026-6368
• CVE-2026-6791
• CVE-2026-18374
• CVE-2026-19542
• CVE-2026-54371
• CVE-2026-56392
• CVE-2026-77117
• CVE-2026-80489
• CVE-2026-86145
• CVE-2026-89156
• CVE-2026-89157
• CVE-2026-89158
• CVE-2026-89160
• CVE-2026-89161
• CVE-2026-103111

References

• https://access.redhat.com/security/updates/classification/#important