Issued:: 2025-04-09
Updated:: 2025-04-09

RHSA-2025:3734 - DevWorkspace Operator 0.33.0 release.

Synopsis

DevWorkspace Operator 0.33.0 release.

Type/Severity

Security Advisory Moderate

Topic

DevWorkspace Operator 0.33.0 has been released.

Description

The DevWorkspace Operator extends OpenShift to provide DevWorkspace support. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)

Solution

To start using the DevWorkspace Operator, install the DevWorkspace Operator from OpenShift OperatorHub on OpenShift Container Platform 4.14 or higher.

Affected Products

Product	Version	Arch
Red Hat OpenShift Dev Spaces	0.33	x86_64

Fixes

(none)

CVEs

(none)

References

https://access.redhat.com/security/cve/CVE-2024-8176

Additional information

The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.