cve-2025-5115
HIGH CVSS 7.5 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2025-08-20 00:00 UTC
- Last Modified
- 2026-09-04
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5115.json"
}
],
"title": "jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames",
"tracking": {
"current_release_date": "2026-09-04T14:40:42+00:00",
"generator": {
"date": "2026-09-04T14:40:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "CVE-2025-5115",
"initial_release_date": "2025-08-20T00:00:00+00:00",
"revision_history": [
{
"date": "2025-08-20T00:00:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-10T11:00:52.758843+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-09-04T14:40:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cryostat 4",
"product": {
"name": "Cryostat 4",
"product_id": "cryostat_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cryostat:4"
}
}
}
],
"category": "product_family",
"name": "Cryostat 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AMQ Broker 7",
"product": {
"name": "Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_broker:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat AMQ Broker 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AMQ Clients",
"product": {
"name": "Red Hat AMQ Clients",
"product_id": "red_hat_amq_clients",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_clients:2023"
}
}
}
],
"category": "product_family",
"name": "Red Hat AMQ Clients"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product": {
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:camel_quarkus:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel for Spring Boot 4",
"product": {
"name": "Red Hat build of Apache Camel for Spring Boot 4",
"product_id": "red_hat_build_of_apache_camel_for_spring_boot_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:camel_spring_boot:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel for Spring Boot 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel - HawtIO 4",
"product": {
"name": "Red Hat build of Apache Camel - HawtIO 4",
"product_id": "red_hat_build_of_apache_camel_-_hawtio_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:apache_camel_hawtio:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel - HawtIO 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apicurio Registry 2",
"product": {
"name": "Red Hat build of Apicurio Registry 2",
"product_id": "red_hat_build_of_apicurio_registry_2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_registry:2"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apicurio Registry 2"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apicurio Registry 3",
"product": {
"name": "Red Hat build of Apicurio Registry 3",
"product_id": "red_hat_build_of_apicurio_registry_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:apicurio_registry:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apicurio Registry 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Debezium 2",
"product": {
"name": "Red Hat build of Debezium 2",
"product_id": "red_hat_build_of_debezium_2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:debezium:2"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Debezium 2"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Debezium 3",
"product": {
"name": "Red Hat build of Debezium 3",
"product_id": "red_hat_build_of_debezium_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:debezium:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Debezium 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of OptaPlanner 8",
"product": {
"name": "Red Hat build of OptaPlanner 8",
"product_id": "red_hat_build_of_optaplanner_8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:optaplanner:::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of OptaPlanner 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Quarkus",
"product": {
"name": "Red Hat build of Quarkus",
"product_id": "red_hat_build_of_quarkus",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quarkus:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Quarkus"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Data Grid 8",
"product": {
"name": "Red Hat Data Grid 8",
"product_id": "red_hat_data_grid_8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_data_grid:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Data Grid 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Fuse 7",
"product": {
"name": "Red Hat Fuse 7",
"product_id": "red_hat_fuse_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_fuse:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Fuse 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 8",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jbosseapxp"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Process Automation 7",
"product": {
"name": "Red Hat Process Automation 7",
"product_id": "red_hat_process_automation_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Process Automation 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Single Sign-On 7",
"product": {
"name": "Red Hat Single Sign-On 7",
"product_id": "red_hat_single_sign-on_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Single Sign-On 7"
},
{
"branches": [
{
"category": "product_name",
"name": "streams for Apache Kafka 2",
"product": {
"name": "streams for Apache Kafka 2",
"product_id": "streams_for_apache_kafka_2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_streams:2"
}
}
}
],
"category": "product_family",
"name": "streams for Apache Kafka 2"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AMQ Broker 7.13.2",
"product": {
"name": "Red Hat AMQ Broker 7.13.2",
"product_id": "Red Hat AMQ Broker 7.13.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_broker:7.13"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss AMQ"
},
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services for OCP 4.14",
"product": {
"name": "OpenShift Developer Tools and Services for OCP 4.14",
"product_id": "8Base-OCP-Tools-4.14",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.14::el8"
}
}
},
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services for OCP 4.13",
"product": {
"name": "OpenShift Developer Tools and Services for OCP 4.13",
"product_id": "8Base-OCP-Tools-4.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.13::el8"
}
}
},
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services for OCP 4.15",
"product": {
"name": "OpenShift Developer Tools and Services for OCP 4.15",
"product_id": "8Base-OCP-Tools-4.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.15::el8"
}
}
},
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services for OCP 4.12",
"product": {
"name": "OpenShift Developer Tools and Services for OCP 4.12",
"product_id": "8Base-OCP-Tools-4.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.12::el8"
}
}
},
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services for OCP 4.16",
"product": {
"name": "OpenShift Developer Tools and Services for OCP 4.16",
"product_id": "9Base-OCP-Tools-4.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.16::el9"
}
}
},
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services for OCP 4.17",
"product": {
"name": "OpenShift Developer Tools and Services for OCP 4.17",
"product_id": "9Base-OCP-Tools-4.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.17::el9"
}
}
},
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services for OCP 4.19",
"product": {
"name": "OpenShift Developer Tools and Services for OCP 4.19",
"product_id": "9Base-OCP-Tools-4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.19::el9"
}
}
},
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services for OCP 4.18",
"product": {
"name": "OpenShift Developer Tools and Services for OCP 4.18",
"product_id": "9Base-OCP-Tools-4.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.18::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift Developer Tools and Services"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
"product": {
"name": "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
"product_id": "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:apache_camel_spring_boot:4.10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Build of Apache Camel"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Offline Knowledge Portal 1.1.4",
"product": {
"name": "Red Hat Offline Knowledge Portal 1.1.4",
"product_id": "Red Hat Offline Knowledge Portal 1.1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:offline_knowledge_portal:1.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Offline Knowledge Portal"
},
{
"category": "product_version",
"name": "netty-codec-http2",
"product": {
"name": "netty-codec-http2",
"product_id": "netty-codec-http2",
"product_identification_helper": {
"purl": "pkg:maven/io.netty/netty-codec-http2"
}
}
},
{
"category": "product_version",
"name": "org.jboss.eap-jboss-eap-xp",
"product": {
"name": "org.jboss.eap-jboss-eap-xp",
"product_id": "org.jboss.eap-jboss-eap-xp",
"product_identification_helper": {
"purl": "pkg:generic/redhat/org.jboss.eap-jboss-eap-xp"
}
}
},
{
"category": "product_version",
"name": "org.postgresql-pgjdbc",
"product": {
"name": "org.postgresql-pgjdbc",
"product_id": "org.postgresql-pgjdbc",
"product_identification_helper": {
"purl": "pkg:generic/redhat/org.postgresql-pgjdbc"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758302106-3.el8.src",
"product": {
"name": "jenkins-0:2.516.3.1758302106-3.el8.src",
"product_id": "jenkins-0:2.516.3.1758302106-3.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758302106-3.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.14.1758302383-1.el8.src",
"product": {
"name": "jenkins-2-plugins-0:4.14.1758302383-1.el8.src",
"product_id": "jenkins-2-plugins-0:4.14.1758302383-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.14.1758302383-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758298953-3.el8.src",
"product": {
"name": "jenkins-0:2.516.3.1758298953-3.el8.src",
"product_id": "jenkins-0:2.516.3.1758298953-3.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758298953-3.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.13.1758299004-1.el8.src",
"product": {
"name": "jenkins-2-plugins-0:4.13.1758299004-1.el8.src",
"product_id": "jenkins-2-plugins-0:4.13.1758299004-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.13.1758299004-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758302665-3.el8.src",
"product": {
"name": "jenkins-0:2.516.3.1758302665-3.el8.src",
"product_id": "jenkins-0:2.516.3.1758302665-3.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758302665-3.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.15.1758303157-1.el8.src",
"product": {
"name": "jenkins-2-plugins-0:4.15.1758303157-1.el8.src",
"product_id": "jenkins-2-plugins-0:4.15.1758303157-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.15.1758303157-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758299374-3.el8.src",
"product": {
"name": "jenkins-0:2.516.3.1758299374-3.el8.src",
"product_id": "jenkins-0:2.516.3.1758299374-3.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758299374-3.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.12.1758299735-1.el8.src",
"product": {
"name": "jenkins-2-plugins-0:4.12.1758299735-1.el8.src",
"product_id": "jenkins-2-plugins-0:4.12.1758299735-1.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.12.1758299735-1.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758336945-3.el9.src",
"product": {
"name": "jenkins-0:2.516.3.1758336945-3.el9.src",
"product_id": "jenkins-0:2.516.3.1758336945-3.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758336945-3.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.16.1758337173-1.el9.src",
"product": {
"name": "jenkins-2-plugins-0:4.16.1758337173-1.el9.src",
"product_id": "jenkins-2-plugins-0:4.16.1758337173-1.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.16.1758337173-1.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758259817-3.el9.src",
"product": {
"name": "jenkins-0:2.516.3.1758259817-3.el9.src",
"product_id": "jenkins-0:2.516.3.1758259817-3.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758259817-3.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.17.1758260106-1.el9.src",
"product": {
"name": "jenkins-2-plugins-0:4.17.1758260106-1.el9.src",
"product_id": "jenkins-2-plugins-0:4.17.1758260106-1.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.17.1758260106-1.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758206866-3.el9.src",
"product": {
"name": "jenkins-0:2.516.3.1758206866-3.el9.src",
"product_id": "jenkins-0:2.516.3.1758206866-3.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758206866-3.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.19.1758207171-1.el9.src",
"product": {
"name": "jenkins-2-plugins-0:4.19.1758207171-1.el9.src",
"product_id": "jenkins-2-plugins-0:4.19.1758207171-1.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.19.1758207171-1.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758260563-3.el9.src",
"product": {
"name": "jenkins-0:2.516.3.1758260563-3.el9.src",
"product_id": "jenkins-0:2.516.3.1758260563-3.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758260563-3.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.18.1758260849-1.el9.src",
"product": {
"name": "jenkins-2-plugins-0:4.18.1758260849-1.el9.src",
"product_id": "jenkins-2-plugins-0:4.18.1758260849-1.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.18.1758260849-1.el9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758302106-3.el8.noarch",
"product": {
"name": "jenkins-0:2.516.3.1758302106-3.el8.noarch",
"product_id": "jenkins-0:2.516.3.1758302106-3.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758302106-3.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"product_id": "jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.14.1758302383-1.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758298953-3.el8.noarch",
"product": {
"name": "jenkins-0:2.516.3.1758298953-3.el8.noarch",
"product_id": "jenkins-0:2.516.3.1758298953-3.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758298953-3.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"product_id": "jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.13.1758299004-1.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758302665-3.el8.noarch",
"product": {
"name": "jenkins-0:2.516.3.1758302665-3.el8.noarch",
"product_id": "jenkins-0:2.516.3.1758302665-3.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758302665-3.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"product_id": "jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.15.1758303157-1.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758299374-3.el8.noarch",
"product": {
"name": "jenkins-0:2.516.3.1758299374-3.el8.noarch",
"product_id": "jenkins-0:2.516.3.1758299374-3.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758299374-3.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"product_id": "jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.12.1758299735-1.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758336945-3.el9.noarch",
"product": {
"name": "jenkins-0:2.516.3.1758336945-3.el9.noarch",
"product_id": "jenkins-0:2.516.3.1758336945-3.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758336945-3.el9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"product_id": "jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.16.1758337173-1.el9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758259817-3.el9.noarch",
"product": {
"name": "jenkins-0:2.516.3.1758259817-3.el9.noarch",
"product_id": "jenkins-0:2.516.3.1758259817-3.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758259817-3.el9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"product_id": "jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.17.1758260106-1.el9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758206866-3.el9.noarch",
"product": {
"name": "jenkins-0:2.516.3.1758206866-3.el9.noarch",
"product_id": "jenkins-0:2.516.3.1758206866-3.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758206866-3.el9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"product_id": "jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.19.1758207171-1.el9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.516.3.1758260563-3.el9.noarch",
"product": {
"name": "jenkins-0:2.516.3.1758260563-3.el9.noarch",
"product_id": "jenkins-0:2.516.3.1758260563-3.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758260563-3.el9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"product": {
"name": "jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"product_id": "jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@4.18.1758260849-1.el9?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"product": {
"name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"product_id": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhokp-rhel9@sha256%3A31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78?arch=amd64&repository_url=registry.redhat.io/offline-knowledge-portal&tag=1.1.2-1759166862"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64",
"product": {
"name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64",
"product_id": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhokp-rhel9@sha256%3A7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd?arch=arm64&repository_url=registry.redhat.io/offline-knowledge-portal&tag=1.1.2-1759166862"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758299374-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.12",
"product_id": "8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.noarch"
},
"product_reference": "jenkins-0:2.516.3.1758299374-3.el8.noarch",
"relates_to_product_reference": "8Base-OCP-Tools-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758299374-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.12",
"product_id": "8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.src"
},
"product_reference": "jenkins-0:2.516.3.1758299374-3.el8.src",
"relates_to_product_reference": "8Base-OCP-Tools-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.12",
"product_id": "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"relates_to_product_reference": "8Base-OCP-Tools-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.12.1758299735-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.12",
"product_id": "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.src"
},
"product_reference": "jenkins-2-plugins-0:4.12.1758299735-1.el8.src",
"relates_to_product_reference": "8Base-OCP-Tools-4.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758298953-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.13",
"product_id": "8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.noarch"
},
"product_reference": "jenkins-0:2.516.3.1758298953-3.el8.noarch",
"relates_to_product_reference": "8Base-OCP-Tools-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758298953-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.13",
"product_id": "8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.src"
},
"product_reference": "jenkins-0:2.516.3.1758298953-3.el8.src",
"relates_to_product_reference": "8Base-OCP-Tools-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.13",
"product_id": "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"relates_to_product_reference": "8Base-OCP-Tools-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.13.1758299004-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.13",
"product_id": "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.src"
},
"product_reference": "jenkins-2-plugins-0:4.13.1758299004-1.el8.src",
"relates_to_product_reference": "8Base-OCP-Tools-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758302106-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14",
"product_id": "8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.noarch"
},
"product_reference": "jenkins-0:2.516.3.1758302106-3.el8.noarch",
"relates_to_product_reference": "8Base-OCP-Tools-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758302106-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14",
"product_id": "8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.src"
},
"product_reference": "jenkins-0:2.516.3.1758302106-3.el8.src",
"relates_to_product_reference": "8Base-OCP-Tools-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14",
"product_id": "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"relates_to_product_reference": "8Base-OCP-Tools-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.14.1758302383-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14",
"product_id": "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.src"
},
"product_reference": "jenkins-2-plugins-0:4.14.1758302383-1.el8.src",
"relates_to_product_reference": "8Base-OCP-Tools-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758302665-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15",
"product_id": "8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.noarch"
},
"product_reference": "jenkins-0:2.516.3.1758302665-3.el8.noarch",
"relates_to_product_reference": "8Base-OCP-Tools-4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758302665-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15",
"product_id": "8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.src"
},
"product_reference": "jenkins-0:2.516.3.1758302665-3.el8.src",
"relates_to_product_reference": "8Base-OCP-Tools-4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15",
"product_id": "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"relates_to_product_reference": "8Base-OCP-Tools-4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.15.1758303157-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15",
"product_id": "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.src"
},
"product_reference": "jenkins-2-plugins-0:4.15.1758303157-1.el8.src",
"relates_to_product_reference": "8Base-OCP-Tools-4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758336945-3.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.16",
"product_id": "9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.noarch"
},
"product_reference": "jenkins-0:2.516.3.1758336945-3.el9.noarch",
"relates_to_product_reference": "9Base-OCP-Tools-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758336945-3.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.16",
"product_id": "9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.src"
},
"product_reference": "jenkins-0:2.516.3.1758336945-3.el9.src",
"relates_to_product_reference": "9Base-OCP-Tools-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.16",
"product_id": "9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"relates_to_product_reference": "9Base-OCP-Tools-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.16.1758337173-1.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.16",
"product_id": "9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.src"
},
"product_reference": "jenkins-2-plugins-0:4.16.1758337173-1.el9.src",
"relates_to_product_reference": "9Base-OCP-Tools-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758259817-3.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.17",
"product_id": "9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.noarch"
},
"product_reference": "jenkins-0:2.516.3.1758259817-3.el9.noarch",
"relates_to_product_reference": "9Base-OCP-Tools-4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758259817-3.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.17",
"product_id": "9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.src"
},
"product_reference": "jenkins-0:2.516.3.1758259817-3.el9.src",
"relates_to_product_reference": "9Base-OCP-Tools-4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.17",
"product_id": "9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"relates_to_product_reference": "9Base-OCP-Tools-4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.17.1758260106-1.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.17",
"product_id": "9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.src"
},
"product_reference": "jenkins-2-plugins-0:4.17.1758260106-1.el9.src",
"relates_to_product_reference": "9Base-OCP-Tools-4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758260563-3.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.18",
"product_id": "9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.noarch"
},
"product_reference": "jenkins-0:2.516.3.1758260563-3.el9.noarch",
"relates_to_product_reference": "9Base-OCP-Tools-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758260563-3.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.18",
"product_id": "9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.src"
},
"product_reference": "jenkins-0:2.516.3.1758260563-3.el9.src",
"relates_to_product_reference": "9Base-OCP-Tools-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.18",
"product_id": "9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"relates_to_product_reference": "9Base-OCP-Tools-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.18.1758260849-1.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.18",
"product_id": "9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.src"
},
"product_reference": "jenkins-2-plugins-0:4.18.1758260849-1.el9.src",
"relates_to_product_reference": "9Base-OCP-Tools-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758206866-3.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.19",
"product_id": "9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.noarch"
},
"product_reference": "jenkins-0:2.516.3.1758206866-3.el9.noarch",
"relates_to_product_reference": "9Base-OCP-Tools-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.516.3.1758206866-3.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.19",
"product_id": "9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.src"
},
"product_reference": "jenkins-0:2.516.3.1758206866-3.el9.src",
"relates_to_product_reference": "9Base-OCP-Tools-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.19",
"product_id": "9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch"
},
"product_reference": "jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"relates_to_product_reference": "9Base-OCP-Tools-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:4.19.1758207171-1.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.19",
"product_id": "9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.src"
},
"product_reference": "jenkins-2-plugins-0:4.19.1758207171-1.el9.src",
"relates_to_product_reference": "9Base-OCP-Tools-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64 as a component of Red Hat Offline Knowledge Portal 1.1.4",
"product_id": "Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64"
},
"product_reference": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"relates_to_product_reference": "Red Hat Offline Knowledge Portal 1.1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64 as a component of Red Hat Offline Knowledge Portal 1.1.4",
"product_id": "Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64"
},
"product_reference": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64",
"relates_to_product_reference": "Red Hat Offline Knowledge Portal 1.1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Cryostat 4",
"product_id": "cryostat_4:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "cryostat_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_amq_broker_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat AMQ Clients",
"product_id": "red_hat_amq_clients:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_amq_clients"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of Apache Camel - HawtIO 4",
"product_id": "red_hat_build_of_apache_camel_-_hawtio_4:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_apache_camel_-_hawtio_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_apache_camel_4_for_quarkus_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of Apache Camel for Spring Boot 4",
"product_id": "red_hat_build_of_apache_camel_for_spring_boot_4:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_apache_camel_for_spring_boot_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of Apicurio Registry 2",
"product_id": "red_hat_build_of_apicurio_registry_2:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_apicurio_registry_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of Apicurio Registry 3",
"product_id": "red_hat_build_of_apicurio_registry_3:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_apicurio_registry_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of Debezium 2",
"product_id": "red_hat_build_of_debezium_2:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_debezium_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of Debezium 3",
"product_id": "red_hat_build_of_debezium_3:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_debezium_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of OptaPlanner 8",
"product_id": "red_hat_build_of_optaplanner_8:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_optaplanner_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat build of Quarkus",
"product_id": "red_hat_build_of_quarkus:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_build_of_quarkus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat Data Grid 8",
"product_id": "red_hat_data_grid_8:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_data_grid_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "org.jboss.eap-jboss-eap-xp as a component of Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8:org.jboss.eap-jboss-eap-xp"
},
"product_reference": "org.jboss.eap-jboss-eap-xp",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "org.postgresql-pgjdbc as a component of Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8:org.postgresql-pgjdbc"
},
"product_reference": "org.postgresql-pgjdbc",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "org.jboss.eap-jboss-eap-xp as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:org.jboss.eap-jboss-eap-xp"
},
"product_reference": "org.jboss.eap-jboss-eap-xp",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "org.postgresql-pgjdbc as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:org.postgresql-pgjdbc"
},
"product_reference": "org.postgresql-pgjdbc",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat Process Automation 7",
"product_id": "red_hat_process_automation_7:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_process_automation_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of Red Hat Single Sign-On 7",
"product_id": "red_hat_single_sign-on_7:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "red_hat_single_sign-on_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netty-codec-http2 as a component of streams for Apache Kafka 2",
"product_id": "streams_for_apache_kafka_2:netty-codec-http2"
},
"product_reference": "netty-codec-http2",
"relates_to_product_reference": "streams_for_apache_kafka_2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-5115",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2025-06-18T08:43:44.656000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"cryostat_4:netty-codec-http2",
"red_hat_amq_clients:netty-codec-http2",
"red_hat_build_of_apache_camel_-_hawtio_4:netty-codec-http2",
"red_hat_build_of_apicurio_registry_2:netty-codec-http2",
"red_hat_build_of_apicurio_registry_3:netty-codec-http2",
"red_hat_build_of_quarkus:netty-codec-http2",
"red_hat_data_grid_8:netty-codec-http2",
"red_hat_fuse_7:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_8:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_8:org.jboss.eap-jboss-eap-xp",
"red_hat_jboss_enterprise_application_platform_8:org.postgresql-pgjdbc",
"red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_expansion_pack:org.jboss.eap-jboss-eap-xp",
"red_hat_jboss_enterprise_application_platform_expansion_pack:org.postgresql-pgjdbc",
"red_hat_process_automation_7:netty-codec-http2",
"streams_for_apache_kafka_2:netty-codec-http2"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2373310"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jetty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a Denial of Service (DoS). While some DoS flaws are classified as Moderate, “MadeYouReset” is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling — malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.src",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.src",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.src",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.src",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.src",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.src",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.src",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.src",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.src",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.src",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.src",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.src",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.src",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.src",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.src",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.src",
"Red Hat AMQ Broker 7.13.2",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64",
"Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
],
"known_affected": [
"red_hat_amq_broker_7:netty-codec-http2",
"red_hat_build_of_apache_camel_4_for_quarkus_3:netty-codec-http2",
"red_hat_build_of_apache_camel_for_spring_boot_4:netty-codec-http2",
"red_hat_build_of_debezium_2:netty-codec-http2",
"red_hat_build_of_debezium_3:netty-codec-http2",
"red_hat_build_of_optaplanner_8:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_7:netty-codec-http2",
"red_hat_single_sign-on_7:netty-codec-http2"
],
"known_not_affected": [
"cryostat_4:netty-codec-http2",
"red_hat_amq_clients:netty-codec-http2",
"red_hat_build_of_apache_camel_-_hawtio_4:netty-codec-http2",
"red_hat_build_of_apicurio_registry_2:netty-codec-http2",
"red_hat_build_of_apicurio_registry_3:netty-codec-http2",
"red_hat_build_of_quarkus:netty-codec-http2",
"red_hat_data_grid_8:netty-codec-http2",
"red_hat_fuse_7:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_8:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_8:org.jboss.eap-jboss-eap-xp",
"red_hat_jboss_enterprise_application_platform_8:org.postgresql-pgjdbc",
"red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_expansion_pack:org.jboss.eap-jboss-eap-xp",
"red_hat_jboss_enterprise_application_platform_expansion_pack:org.postgresql-pgjdbc",
"red_hat_process_automation_7:netty-codec-http2",
"streams_for_apache_kafka_2:netty-codec-http2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-5115"
},
{
"category": "external",
"summary": "RHBZ#2373310",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373310"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-5115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5115",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5115"
},
{
"category": "external",
"summary": "https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h",
"url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/767506",
"url": "https://kb.cert.org/vuls/id/767506"
}
],
"release_date": "2025-08-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-09-23T09:47:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.src",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.src"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16459"
},
{
"category": "vendor_fix",
"date": "2025-09-23T10:09:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.src",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.src"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16460"
},
{
"category": "vendor_fix",
"date": "2025-09-23T10:10:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.src",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.src"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16461"
},
{
"category": "vendor_fix",
"date": "2025-09-23T10:09:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.src",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.src"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16462"
},
{
"category": "vendor_fix",
"date": "2025-09-23T09:44:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.src",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.src"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16457"
},
{
"category": "vendor_fix",
"date": "2025-09-23T09:44:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.src",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.src"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16456"
},
{
"category": "vendor_fix",
"date": "2025-09-23T09:40:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.src",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.src"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16455"
},
{
"category": "vendor_fix",
"date": "2025-09-23T09:44:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.src",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.src"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16454"
},
{
"category": "vendor_fix",
"date": "2025-10-08T14:48:34+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat AMQ Broker 7.13.2"
],
"url": "https://access.redhat.com/errata/RHSA-2025:17567"
},
{
"category": "vendor_fix",
"date": "2025-09-29T17:36:18+00:00",
"details": "The container image provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command. A satellite subscription is required to download and use this product.",
"product_ids": [
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64"
],
"url": "https://access.redhat.com/errata/RHSA-2025:16989"
},
{
"category": "vendor_fix",
"date": "2025-08-28T18:38:33+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
],
"url": "https://access.redhat.com/errata/RHSA-2025:14911"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.src",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.src",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.src",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.src",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.src",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.src",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.src",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.src",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.src",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.src",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.src",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.src",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.src",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.src",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.src",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.src",
"Red Hat AMQ Broker 7.13.2",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64",
"Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
"red_hat_amq_broker_7:netty-codec-http2",
"red_hat_build_of_apache_camel_4_for_quarkus_3:netty-codec-http2",
"red_hat_build_of_apache_camel_for_spring_boot_4:netty-codec-http2",
"red_hat_build_of_debezium_2:netty-codec-http2",
"red_hat_build_of_debezium_3:netty-codec-http2",
"red_hat_build_of_optaplanner_8:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_7:netty-codec-http2",
"red_hat_single_sign-on_7:netty-codec-http2"
]
},
{
"category": "no_fix_planned",
"details": "Out of support scope",
"product_ids": [
"red_hat_single_sign-on_7:netty-codec-http2"
]
},
{
"category": "no_fix_planned",
"details": "Will not fix",
"product_ids": [
"red_hat_amq_broker_7:netty-codec-http2",
"red_hat_build_of_debezium_2:netty-codec-http2",
"red_hat_build_of_debezium_3:netty-codec-http2",
"red_hat_build_of_optaplanner_8:netty-codec-http2"
]
},
{
"category": "none_available",
"details": "Affected",
"product_ids": [
"red_hat_build_of_apache_camel_4_for_quarkus_3:netty-codec-http2",
"red_hat_build_of_apache_camel_for_spring_boot_4:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_7:netty-codec-http2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.src",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.src",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.src",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.src",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.src",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.src",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.src",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.src",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.src",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.src",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.src",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.src",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.src",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.src",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.src",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.src",
"Red Hat AMQ Broker 7.13.2",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64",
"Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
"cryostat_4:netty-codec-http2",
"red_hat_amq_broker_7:netty-codec-http2",
"red_hat_amq_clients:netty-codec-http2",
"red_hat_build_of_apache_camel_-_hawtio_4:netty-codec-http2",
"red_hat_build_of_apache_camel_4_for_quarkus_3:netty-codec-http2",
"red_hat_build_of_apache_camel_for_spring_boot_4:netty-codec-http2",
"red_hat_build_of_apicurio_registry_2:netty-codec-http2",
"red_hat_build_of_apicurio_registry_3:netty-codec-http2",
"red_hat_build_of_debezium_2:netty-codec-http2",
"red_hat_build_of_debezium_3:netty-codec-http2",
"red_hat_build_of_optaplanner_8:netty-codec-http2",
"red_hat_build_of_quarkus:netty-codec-http2",
"red_hat_data_grid_8:netty-codec-http2",
"red_hat_fuse_7:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_7:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_8:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_8:org.jboss.eap-jboss-eap-xp",
"red_hat_jboss_enterprise_application_platform_8:org.postgresql-pgjdbc",
"red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_expansion_pack:org.jboss.eap-jboss-eap-xp",
"red_hat_jboss_enterprise_application_platform_expansion_pack:org.postgresql-pgjdbc",
"red_hat_process_automation_7:netty-codec-http2",
"red_hat_single_sign-on_7:netty-codec-http2",
"streams_for_apache_kafka_2:netty-codec-http2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important",
"product_ids": [
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-0:2.516.3.1758299374-3.el8.src",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.noarch",
"8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1758299735-1.el8.src",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-0:2.516.3.1758298953-3.el8.src",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.noarch",
"8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1758299004-1.el8.src",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-0:2.516.3.1758302106-3.el8.src",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.noarch",
"8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1758302383-1.el8.src",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-0:2.516.3.1758302665-3.el8.src",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.noarch",
"8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1758303157-1.el8.src",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-0:2.516.3.1758336945-3.el9.src",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.noarch",
"9Base-OCP-Tools-4.16:jenkins-2-plugins-0:4.16.1758337173-1.el9.src",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-0:2.516.3.1758259817-3.el9.src",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.noarch",
"9Base-OCP-Tools-4.17:jenkins-2-plugins-0:4.17.1758260106-1.el9.src",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-0:2.516.3.1758260563-3.el9.src",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.noarch",
"9Base-OCP-Tools-4.18:jenkins-2-plugins-0:4.18.1758260849-1.el9.src",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-0:2.516.3.1758206866-3.el9.src",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.noarch",
"9Base-OCP-Tools-4.19:jenkins-2-plugins-0:4.19.1758207171-1.el9.src",
"Red Hat AMQ Broker 7.13.2",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:31830a6c2976a2336f946569f10bd7d93d5a662666014e2be846311b12d2fa78_amd64",
"Red Hat Offline Knowledge Portal 1.1.4:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:7d3aed2d9f40ed84bf0b9fb71d336780a3668c0f9d29cc29ee7e11bccf7ef7bd_arm64",
"Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
"cryostat_4:netty-codec-http2",
"red_hat_amq_broker_7:netty-codec-http2",
"red_hat_amq_clients:netty-codec-http2",
"red_hat_build_of_apache_camel_-_hawtio_4:netty-codec-http2",
"red_hat_build_of_apache_camel_4_for_quarkus_3:netty-codec-http2",
"red_hat_build_of_apache_camel_for_spring_boot_4:netty-codec-http2",
"red_hat_build_of_apicurio_registry_2:netty-codec-http2",
"red_hat_build_of_apicurio_registry_3:netty-codec-http2",
"red_hat_build_of_debezium_2:netty-codec-http2",
"red_hat_build_of_debezium_3:netty-codec-http2",
"red_hat_build_of_optaplanner_8:netty-codec-http2",
"red_hat_build_of_quarkus:netty-codec-http2",
"red_hat_data_grid_8:netty-codec-http2",
"red_hat_fuse_7:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_7:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_8:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_8:org.jboss.eap-jboss-eap-xp",
"red_hat_jboss_enterprise_application_platform_8:org.postgresql-pgjdbc",
"red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-http2",
"red_hat_jboss_enterprise_application_platform_expansion_pack:org.jboss.eap-jboss-eap-xp",
"red_hat_jboss_enterprise_application_platform_expansion_pack:org.postgresql-pgjdbc",
"red_hat_process_automation_7:netty-codec-http2",
"red_hat_single_sign-on_7:netty-codec-http2",
"streams_for_apache_kafka_2:netty-codec-http2"
]
}
],
"title": "jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)