FEDORA-2025-172ba9078e — security update for cri-o1.33

stable

cri-o1.33-1.33.5-1.fc42

FEDORA-2025-172ba9078e created by buckaroogeek 7 months ago for Fedora 42

Update to release v1.33.5
Resolves: #2333357, #2375096, #2398408, #2398663, #2399065, #2399339
Upstream fixes

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-172ba9078e

This update has been submitted for testing by buckaroogeek.

7 months ago

This update's test gating status has been changed to 'ignored'.

7 months ago

This update has been pushed to testing.

7 months ago

This update has been submitted for stable by bodhi.

7 months ago

This update has been pushed to stable.

7 months ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

7 months ago

in testing

7 months ago

in stable

7 months ago

approved

7 months ago

Builds

cri-o1.33-1.33.5-1.fc42

BZ#2333357 cri-o-1.34.1 is available

BZ#2375096 CVE-2025-4437 cri-o1.33: Large /etc/passwd file may lead to Denial of Service [fedora-42]

BZ#2398408 CVE-2025-47910 cri-o1.33: CrossOriginProtection bypass in net/http [fedora-41]

BZ#2398663 CVE-2025-47910 cri-o1.33: CrossOriginProtection bypass in net/http [fedora-42]

BZ#2399065 CVE-2025-47906 cri-o1.33: Unexpected paths returned from LookPath in os/exec [fedora-41]

BZ#2399339 CVE-2025-47906 cri-o1.33: Unexpected paths returned from LookPath in os/exec [fedora-42]

cri-o1.33-1.33.5-1.fc42

Automated Test Results

ignored