Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 41: Kubernetes v1.33.4 Fixes Self-Deleting Nodes CVE-2025-5187

fedora
Calendar Grey August 23, 2025
Dist Fedora Esm H88
The upgrade to Kubernetes 1.33.4 on Fedora 41 addresses the self-removing node vulnerability CVE-2025-5187, incorporating the suggested mitigations.
Update to release v1.33.4 Resolves: rhbz#2388412 Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes

Summary

Production-Grade Container Scheduling and Management.

Installs kubelet, the kubernetes agent on each machine in a

cluster. The kubernetes-client sub-package,

containing kubectl, is recommended but not strictly required.

The kubernetes-client sub-package should be installed on

control plane machines.

Update Information:

Update to release v1.33.4 Resolves: rhbz#2388412 Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes

Topics%20covered

Topics Covered

security advisory fedora threat remediation kubernetes nodes

Change Log

* Wed Aug 13 2025 Bradley G Smith - 1.33.4-1 - Update to release v1.33.4 - Resolves: rhbz#2388412 - Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference - Upstream fixes * Thu Jul 24 2025 Fedora Release Engineering - 1.33.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Wed Jul 16 2025 Bradley G Smith - 1.33.3-1 - Update to release v1.33.3 - Resolves: rhbz#2380409 - Upstream fixes * Wed Jun 18 2025 Bradley G Smith - 1.33.2-1 - Update to release v1.33.2 - Resolves CVE-2025-4563 - Upstream fixes and cleanups * Thu May 15 2025 Bradley G Smith - 1.33.1-1 - Update to v1.33.1 - Resolves: rhbz#2366642 - Upstream fixes - Read upstream changelog for important details if upgrading cluster from v1.32.x or earlier. * Wed Apr 23 2025 Bradley G Smith - 1.33.0-1 - Initial release v1.33.0 - Resolves: rhbz#2361917 - Initial release for Kubernetes 1.33. - Major changes, updates and fixes; See upstream changelog. - Upstream changelog has a 'Must Read' statement * Wed Feb 19 2025 Bradley G Smith - 1.33.0~alpha.2-1 - Add initial v1.33 spec file * Tue Oct 29 2024 Bradley G Smith - RPMAUTOSPEC: unresolvable merge

References


[ 1 ] Bug #2388412 - kubernetes1.32-1.33.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2388412

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-51e8d5ec56' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: kubernetes1.33
Product: Fedora 41
Version: 1.33.4
Release: 1.fc41
URL: https://github.com/kubernetes/kubernetes
Summary: Open Source Production-Grade Container Scheduling And Management Platform

Topics%20covered

Topics Covered

security advisory fedora threat remediation kubernetes nodes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here