FEDORA-2025-fa02acfc0f — security update for cri-o1.33

stable

cri-o1.33-1.33.6-1.fc44

FEDORA-2025-fa02acfc0f created by buckaroogeek 4 months ago for Fedora 44

Automatic update for cri-o1.33-1.33.6-1.fc44.

Changelog

* Tue Nov 11 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
- Update to release 1.33.6
- Resolves: rhbz#2407594, rhbz#2407865, rhbz#2408141, rhbz#2408575
- Resolves: rhbz#2408639, rhbz#2408702, rhbz#2409049, rhbz#2409332
- Resolves: rhbz#2409611, rhbz#2409997, rhbz#2410284, rhbz#2410562
- Resolves: rhbz#2410929, rhbz#2411197, rhbz#2411460, rhbz#2412525
- Resolves: rhbz#2412677, rhbz#2412757

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-fa02acfc0f

This update was automatically created

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has been submitted for stable by bodhi

4 months ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

0 days

Dates

submitted

4 months ago

in testing

4 months ago

in stable

4 months ago

approved

4 months ago

Builds

cri-o1.33-1.33.6-1.fc44

BZ#2407594 CVE-2025-58189 cri-o1.33: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-41]

BZ#2407865 CVE-2025-58189 cri-o1.33: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]

BZ#2408141 CVE-2025-58189 cri-o1.33: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]

BZ#2408575 CVE-2025-61725 cri-o1.33: Excessive CPU consumption in ParseAddress in net/mail [fedora-41]

BZ#2408639 CVE-2025-61725 cri-o1.33: Excessive CPU consumption in ParseAddress in net/mail [fedora-42]

BZ#2408702 CVE-2025-61725 cri-o1.33: Excessive CPU consumption in ParseAddress in net/mail [fedora-43]

BZ#2409049 CVE-2025-61723 cri-o1.33: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-41]

BZ#2409332 CVE-2025-61723 cri-o1.33: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42]

BZ#2409611 CVE-2025-61723 cri-o1.33: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43]

BZ#2409997 CVE-2025-58185 cri-o1.33: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-41]

BZ#2410284 CVE-2025-58185 cri-o1.33: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42]

BZ#2410562 CVE-2025-58185 cri-o1.33: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43]

BZ#2410929 CVE-2025-58188 cri-o1.33: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-41]

BZ#2411197 CVE-2025-58188 cri-o1.33: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-42]

BZ#2411460 CVE-2025-58188 cri-o1.33: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]

BZ#2412525 CVE-2025-58183 cri-o1.33: Unbounded allocation when parsing GNU sparse map [fedora-41]

BZ#2412677 CVE-2025-58183 cri-o1.33: Unbounded allocation when parsing GNU sparse map [fedora-43]

BZ#2412757 CVE-2025-58183 cri-o1.33: Unbounded allocation when parsing GNU sparse map [fedora-42]

cri-o1.33-1.33.6-1.fc44

Automated Test Results

ignored