Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

Fedora 42: cri-o 1.32.9 Important Security Fix 2025-37970906a8

fedora
Calendar Grey October 11, 2025
Dist Fedora Esm H88
Fedora 42 updates cri-o 1.32.9 to address critical issues impacting Kubernetes with upstream fixes.
Update to release 1.32.9 Resolves: rhbz#2333357, rhbz#2398407, rhbz#2398662, rhbz#2399064, rhbz#2399338 Upstream fix

Summary

Open Container Initiative-based implementation of Kubernetes Container Runtime

Interface.

Update Information:

Update to release 1.32.9 Resolves: rhbz#2333357, rhbz#2398407, rhbz#2398662, rhbz#2399064, rhbz#2399338 Upstream fix

Topics%20covered

Topics Covered

security advisory fedora important threat mitigation container runtime upstream fix

Change Log

* Thu Oct 2 2025 Bradley G Smith - 1.32.9-1 - Update to release 1.32.9 - Resolves: rhbz#2333357, rhbz#2398407, rhbz#2398662, rhbz#2399064, rhbz#2399338 - Upstream fix

References


[ 1 ] Bug #2333357 - cri-o-1.34.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2333357 [ 2 ] Bug #2398407 - CVE-2025-47910 cri-o1.32: CrossOriginProtection bypass in net/http [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2398407 [ 3 ] Bug #2398662 - CVE-2025-47910 cri-o1.32: CrossOriginProtection bypass in net/http [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2398662 [ 4 ] Bug #2399064 - CVE-2025-47906 cri-o1.32: Unexpected paths returned from LookPath in os/exec [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2399064 [ 5 ] Bug #2399338 - CVE-2025-47906 cri-o1.32: Unexpected paths returned from LookPath in os/exec [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399338

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-37970906a8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: cri-o1.32
Product: Fedora 42
Version: 1.32.9
Release: 1.fc42
URL: https://github.com/cri-o/cri-o
Summary: Open Container Initiative-based implementation of Kubernetes Container Runtime Interface

Topics%20covered

Topics Covered

security advisory fedora important threat mitigation container runtime upstream fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here