Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:93987 - Security Advisory
Issued:
2026-11-02
Updated:
2026-11-02

RHSA-2026:93987 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Red Hat OpenShift Dev Spaces 3.31.2 Release.

Type/Severity

Security Advisory: Important

Topic

Red Hat OpenShift Dev Spaces 3.31.2 has been released.

Description

This release contains fixes for CVE-2026-111497.
Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.
The 3.31 release is based on Eclipse Che 7.123.x and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.
Users still using the v1 standard should migrate as soon as possible.
https://devfile.io/docs/2.2.0/migrating-to-devfile-v2
Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.
https://access.redhat.com/support/policy/updates/openshift#crw

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258

Affected Products

  • Red Hat OpenShift Dev Spaces

Fixes

(none)

CVEs

  • CVE-2026-111497
  • CVE-2025-12999

References

  • https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.31/html/administration_guide/installing-devspaces
  • https://access.redhat.com/security/updates/classification/

amd64

registry.redhat.io/devspaces/code-rhel9@sha256:f67d4763c6c944a57860787be7098d0fd56200abe5ca95b2e29d4c934e03cc6e
registry.redhat.io/devspaces/code-sshd-rhel9@sha256:8fe34b04ae0d2e987a2f30bfbe53548856bbd94cd28e7221c82e8ed5fb42babd
registry.redhat.io/devspaces/configbump-rhel9@sha256:a57f60ff471ec96afb87e9e053b78a504ad033a43cc99f77505cdfc9835f40e6
registry.redhat.io/devspaces/dashboard-rhel9@sha256:a5e84f07cf284fcbdd00f741304dcb7bb7508711c650e4ecb8c2273570c61e0b
registry.redhat.io/devspaces/imagepuller-rhel9@sha256:18a53f8b50dc01f944fe7082a418121a876e61412b2f22ec9ea01351ea15dde9
registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0b4a3268d54b6758c1150806ea1a504b307716fcb3c73acfaafcc68ee91dbde5
registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:6c62ebb93f0abaa9a8b034621ec90b8489acb0706eed52a5250cf9682f697c29
registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:7fa4c4e4a3300404111215399478f2415f0f27082f5cc28465743254a82c8c7b
registry.redhat.io/devspaces/openvsx-rhel9@sha256:d4503b6b0971000076ae15917754c2992d688d24d8ed4117aceffef992e5a398
registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:190e4402c4bb91c64bfd67271e50da55b43e79bb0b91a5ce63ba0983dc6e107a
registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:c8a4d42856990e5b5046797aba06b95a6bc758976ed4529bff2d69edd4e2c23d
registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:506725693c9df655266969fe8ded3239efd74032f456feebdefab7499fa67102
registry.redhat.io/devspaces/server-rhel9@sha256:d41e70dcbda6152d51d3a2da438254bfda2bd97ae26ec6d09631605788b11645
registry.redhat.io/devspaces/traefik-rhel9@sha256:5c684c6f65ff090d07c4f737adc70a95b462379df6898bad0b54c8e84d749b26
registry.redhat.io/devspaces/udi-rhel9@sha256:05b51f6ceb245d975d39868d46d8c1653bd2080e51b9e3c8bf783c1032157e08
registry.redhat.io/devspaces/udi-base-rhel9@sha256:b480d6d788f9b05d182907963b13359005385bb22f12b6e32218ae2aea060bd1

arm64

registry.redhat.io/devspaces/code-rhel9@sha256:e1117d8f4d3f40adea517ac74b3b0da9e86983b7aa53b513cb754ac2227f0ccc
registry.redhat.io/devspaces/code-sshd-rhel9@sha256:784bd21f79e4a196c57c6fa1e012cbff6e2780c347b2244e40414bc8fb695f79
registry.redhat.io/devspaces/configbump-rhel9@sha256:670c02e62049a3f3c0e47993dc6fd673bd63e3d5879fa817535a072d9a458c98
registry.redhat.io/devspaces/dashboard-rhel9@sha256:19a43008e9776fff36f2cf63b706512bf24dd55da5f0ca7abee52dcfa8d9b743
registry.redhat.io/devspaces/imagepuller-rhel9@sha256:b4d94efbae36912896539330f6be84341075439f0cbba8df5b8a29f664f586d8
registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:59cd73b9cce6a5f5b95efc4793f546387d779959cfcc3d3f596e6f05c2f56f14
registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3c6bbad4d7382e93cfa67e056abfe9d6fff05ff0cf5b60a316fc0b15427a3ef4
registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:b8a9bf33167521a237d2267fdf3e160b3255a2e65afa5aed5a1547feb5a98177
registry.redhat.io/devspaces/openvsx-rhel9@sha256:3b2fbd70ee4656ecf8ad3c6c82250a1f76b54b79f43d41fa0a55246d414088b1
registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:ba080acda238e21b0dc763cf96c413189239862243b58632fe47f5f08e79f806
registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:0e377582ed345de10eb68e71d39ec2133b399d8bb6c42a4346e462b53034baaf
registry.redhat.io/devspaces/server-rhel9@sha256:43cf4fea06761ae4a8661f1ad70dca15ae09e67c33384cb8e2f702a14ba7af33
registry.redhat.io/devspaces/traefik-rhel9@sha256:a511ee3a656c65ac16ed2aa9795d0c413196260777c01284ab9f2224b9ae1e0e
registry.redhat.io/devspaces/udi-rhel9@sha256:74083245c978ab29283df13bfcefde4e4254b002fdac07731bc9a701232fa938
registry.redhat.io/devspaces/udi-base-rhel9@sha256:b10d2b447c196d5da4837b25e43d1a55debf3b7ec174520e29ec6c7b0504995a

ppc64le

registry.redhat.io/devspaces/code-rhel9@sha256:6d3a9cbd9c4a3924223b10343678fa6398d69cabf0b1a170bc59466ad43080e2
registry.redhat.io/devspaces/code-sshd-rhel9@sha256:415a3c0c74b66d9d8da4984fe2681d5574683720fccd1fcfd3390d3e10bdde40
registry.redhat.io/devspaces/configbump-rhel9@sha256:c4133b3ea98c67a87d83fdca73097b50f3b27f79fd3af4ba7110cea3892c9a21
registry.redhat.io/devspaces/dashboard-rhel9@sha256:50294dfb751efde199072408027958abe028cf13b7b978c0e2b9b5df2eeee895
registry.redhat.io/devspaces/imagepuller-rhel9@sha256:cb0f39f467cc4bc143644eb9c47875a72a26bc92242601056198bf45058a028c
registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:3d85d24fcf983833e9750a5c903f1f09fc31022c0966d551e4489e20459ba155
registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:d4c5ddf52bdf74d29eec8d53d13fdf4003ab2a8f86e72627559b87f97e6ebd55
registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:519443ba378090e104b5ea304b79b77c7b24966a94fbb765a2b924295b804f47
registry.redhat.io/devspaces/openvsx-rhel9@sha256:f33709e4f1bd200e7799c2cdd32fd08a7eb3c2343dfee71b44f6c298320c1213
registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:84df9b36d22e3f66dfbc2178a682c047813b36aa017ed897e46b26edaac1085e
registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:5d234e923e06844dc56385ee029b81500edbc9f5c86cd07cff17cfc05c254089
registry.redhat.io/devspaces/server-rhel9@sha256:a1d29372eb34e7c01ca803638edbe14e5c1d14f8df776c478b2a48fbb0eb442e
registry.redhat.io/devspaces/traefik-rhel9@sha256:b8630a7aadbdaa3b7020dc3d97c25b12f619bbc56cae0c4ab975cdcfc8c0152b
registry.redhat.io/devspaces/udi-rhel9@sha256:48c32b57152c1e351df774a0feb24c937237cce118c90c8c939a57fbaf80b638
registry.redhat.io/devspaces/udi-base-rhel9@sha256:7241aadee9a9d910d31efbba31149306dd6ad7439eeb37dfb0dec07791696332

s390x

registry.redhat.io/devspaces/code-rhel9@sha256:0e3e9a41db1e015345046b22f6a6c54d6d50582dadcda6cc08fdb36842afc372
registry.redhat.io/devspaces/code-sshd-rhel9@sha256:290a81eb8be15702bd5018ad10a50e92cbdb062c00c42379dbbd5ca77dbf9781
registry.redhat.io/devspaces/configbump-rhel9@sha256:4724643d443fe31e04a686663da388428d1b8778d37062bfecd8f591fc4bd4a5
registry.redhat.io/devspaces/dashboard-rhel9@sha256:20f2171ae44330eda9ac396fadbd2cab301199561d83274566ea309e303120c4
registry.redhat.io/devspaces/imagepuller-rhel9@sha256:48473f30cee58561083adf89c3141df0bd943e067ccd00199dffe5c05cebd96b
registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7fd2d21d5e5bbc133e12a10d628276f9d9eb7dbfc8c30d029f21e07278cdcb23
registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:804ee34d1f032e89c1eeb1791d757899d8c94268852d34e6cae5cc6b718c0265
registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:844a6b35b7232431a4247473bd1b0eb6b9d8146971700dbe5f229cd99a8adb30
registry.redhat.io/devspaces/openvsx-rhel9@sha256:6e4a03bc5780757cbd882158b3399526a1a1dcf357a669880cab4ed5a788fd40
registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:6bd7d48bb10a67823d98a8cbda79600e31d3738660e4ed2b76c85213ec3d2403
registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:1dad0b1b19712a635412cb70c02bb14df7fa6c63ad09769702b482cbcc6268ce
registry.redhat.io/devspaces/server-rhel9@sha256:9062ccba1c0a5e601b092449c082cc2475c3dfba8c8185de1bf9962d870366d6
registry.redhat.io/devspaces/traefik-rhel9@sha256:7b699d639a3a1ade5d0f202d6b1801028d90da0317c9e6c55efe1105a03c2b0f
registry.redhat.io/devspaces/udi-rhel9@sha256:4ddc52b54edc07f9127ab62daab659885282b0e109991d8ff01b4b555ee6b5c5
registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a82546d3e945294797f963ae5f51d0be2e3dfc7f87d3b922c520717bc6c01b6

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility