Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update

Fixed packages 2

Vulnerabilities 1

• High 7.7
  CVE-2025-5115

  MadeYouReset HTTP/2 vulnerability

  In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state,…

  Eclipse Jetty Eclipse Jetty trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  Aug 20, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2373310
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16461.json
• report
  https://access.redhat.com/security/cve/CVE-2025-5115
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-5115
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-5115
• article
  https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h
• article
  https://kb.cert.org/vuls/id/767506