RHSA-2025:16461HighCVSS 7.5

Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update

Published
September 23, 2025
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2025-5115 →

📋 Description

CVE-2025-5115 — jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to "MadeYouReset" DoS attack through HTTP/2 control frames

🎯 Affected products5

  • OpenShift Developer Tools and Services for OCP 4.14
  • jenkins-0:2.516.3.1758302106-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14
  • jenkins-0:2.516.3.1758302106-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14
  • jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14
  • jenkins-2-plugins-0:4.14.1758302383-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability.

🔗 References (4)