Red Hat Security Advisory

RHSA-2026:73516

Red Hat OpenShift Dev Spaces 3.30.2 Release.

Released 2026-09-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Dev Spaces 3.30 registry.redhat.io/devspaces/code-rhel9

Fixes 2 records

TI-2026-07847 CVE-2026-8927 · GHSA-jr4f-4564-w3mr

env-set cross-proxy Digest auth state leak

HIGH 74

When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.005 Published 2026-07-03 Partial fix · 8.14.2, 8.16.1 +1 CWE-294

TI-2026-07430 CVE-2026-8458 · GHSA-88c6-6jfq-mm4q

wrong reuse for different services

MEDIUM 62

libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different "services".

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00371 Published 2026-07-03 Partial fix · 8.14.2, 8.16.1 +1 CWE-488