RHSA-2025:0892HighCVSS 8.2

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.18.0 release

Published
February 3, 2025
Last Modified
September 17, 2026

🔗 CVE IDs covered (7)

CVE-2024-45338 →CVE-2024-45801 →CVE-2024-53899 →CVE-2024-55565 →CVE-2023-44270 →CVE-2024-21538 →CVE-2024-45337 →

📋 Description

CVE-2023-44270 — PostCSS: Improper input validation in PostCSS CVE-2024-21538 — cross-spawn: regular expression denial of service CVE-2024-45337 — golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html CVE-2024-45801 — dompurify: XSS vulnerability via prototype pollution CVE-2024-53899 — virtualenv: potential command injection via virtual environment activation scripts CVE-2024-55565 — nanoid: nanoid mishandles non-integer values

🎯 Affected products35

  • Red Hat OpenShift Dev Spaces 3
  • devspaces-tech-preview/idea-rhel9@sha256:56808324fd8f18efcaf1143c062b4611d4daf92d2b3827b6744b7103e6862eb5_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/code-rhel9@sha256:03465af90654f18716911c227ad49422cda691bdea686936df1d37dcc058e485_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/code-rhel9@sha256:7d2e2198bc93f6955477a3ec4f63a38b78273ea1007850c48ace3bb16c9666b1_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/code-rhel9@sha256:90a61893d9127600dd108fedf9ee0b1fcac4502a196b8de7936589c100fc49fe_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/configbump-rhel9@sha256:741e2650528085ebfe65969d5c48ab7f3f258d73f0a35e9f0ca0ff2186a64072_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/configbump-rhel9@sha256:cb292b971baf4de9f13b913ef0f3e391c1b12919175ae9dab43d18a70f4411a2_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/configbump-rhel9@sha256:efea4d960bce51d34f2021b08ed5134f99f2bbbe759e550bf5bb4787ec40539e_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/dashboard-rhel9@sha256:70ac5c215c4fc78e0b89c46bfa537f9bfb835af1897708f9cb181648659311d2_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/dashboard-rhel9@sha256:92891c316760203637d3739fc7fe5a6801e3b11faf22b405559dc1c05adbf6b2_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/dashboard-rhel9@sha256:a929eb292b97c9fc5d573a1ce5dc283268e189ec271abca29e183769b7f8ab86_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/devspaces-operator-bundle@sha256:677b3ce8d509429000a0696e05518ea9d4e69533407480b7728e523375c5303b_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/devspaces-operator-bundle@sha256:6a70f3e63cb4d87e96f54e3f2075a7f8cacaa10c92efe71c4d4bb5a43e4f1247_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/devspaces-operator-bundle@sha256:7d585ce8bce9b7ab571bf8a893bda495d255601e14b8a8aa516d0524545748dc_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/devspaces-rhel9-operator@sha256:58218f2ce601e03f87858ada727cf52e964f0212124001740bf305dc36e67fbd_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/devspaces-rhel9-operator@sha256:616fe916fe4bdf7cf26f1463b7df306bd63772eb31bdf83f70c42db9775765e5_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/devspaces-rhel9-operator@sha256:98f3e811e3c8ebec180a6dc58353f72acf0dffad608b59d091af5f1887d37e05_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/imagepuller-rhel9@sha256:1aab5a0eeaf68576aa5a0793cbe220bb8a783ec5670aa46240b88530897db345_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/imagepuller-rhel9@sha256:6d121ae6d94afb5d723730e63fcd49c5cfaa1f2518cdb534215399a1f08ff040_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/imagepuller-rhel9@sha256:d68cced8fab3fd16ddaaf45fe0c5498b60a4a09a2b5c4e5f984529d041d13708_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/machineexec-rhel9@sha256:5692486f392037c261b89bdf1004ac8982002c3c7e15cf3babcd3031970b3844_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/machineexec-rhel9@sha256:5cee29e36e341486bd91b8e578c9fd5a3fb657cbd6c6249dd69bb0a6e5b57dfd_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/machineexec-rhel9@sha256:92c07684e0deb9c515e509853d2d58a714b655f8be48be942f1da12da5cc65e0_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/pluginregistry-rhel9@sha256:2d9d7bacf93ceeca7b410e16fa84cb48c5c04092ac7e5ba22681b96abd0cf228_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/pluginregistry-rhel9@sha256:98be37c2d983b7af80f0c8527d6297eaf7177ee52457979b45d13cdd27976004_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/pluginregistry-rhel9@sha256:c57424174146743c9185105ae51c49e578a9dae1ca53375879a730704a5a686f_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/server-rhel9@sha256:03d2025cc1fe797a3c54206cf37323e4bc6bc1c4197b70377bef7f727e33ed1b_s390x as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/server-rhel9@sha256:15b8c0c6c6ed150183d8039fda25fa3986a55c8e7571b6d07f19eb91d51ae976_ppc64le as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/server-rhel9@sha256:83afeb4a5ae28f1193261a4f942c400854fc2b2148bdf38c54706e72b345786b_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • devspaces/traefik-rhel9@sha256:55275214e27d4620bd2e4caf7a1a24598762fc1eff67c072e9c53fff4a633dca_amd64 as a component of Red Hat OpenShift Dev Spaces 3
  • +5 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: There's no known mitigation for this issue. Red Hat recommends to not parse untrusted CSS input using PostCSS. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (10)