Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 41: FEDORA-2025-509fc3c663 critical: NodeRestriction bypass

Update to release v1.32.6. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-509fc3c663 2025-06-29 01:22:44.380201+00:00 -------------------------------------------------------------------------------- Name : kubernetes1.32 Product : Fedora 41 Version : 1.32.6 Release : 1.fc41 URL : https://github.com/kubernetes/kubernetes Summary : Open Source Production-Grade Container Scheduling And Management Platform Description : Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machines. -------------------------------------------------------------------------------- Update Information: Update to release v1.32.6 -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 19 2025 Bradley G Smith - 1.32.6-1 - Update to release v1.32.6 - Resolves: rhbz#2373848,rhbz#2373847 - Resolves: CVE-2025-4563 - Upstream fixes and cleanups -------------------------------------------------------------------------------- References: [ 1 ] Bug #2373847 - CVE-2025-4563 kubernetes1.32: NodeRestriction Admission Controller Dynamic Resource Allocation Bypass [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2373847 [ 2 ] Bug #2373848 - CVE-2025-4563 kubernetes1.32: NodeRestriction Admission Controller Dynamic Resource Allocation Bypass [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2373848 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-509fc3c663' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Kubernetes 1.32 brings vital updates to Fedora 41, addressing a serious security flaw that could bypass access controls, ensuring system integrity and security. Kubernetes Security, Fedora Update, Container Management, Node Restriction, System Update. . Severity: Critical. LinuxSecurity.com Team

Jun 29, 2025 •Critical Fedora