• CRI-O v1.32.13
  • Downloads
  • Changelog since v1.32.12
    • Changes by Kind
      • Dependency-Change
      • Feature
      • Bug or Regression
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.32.13

The release notes have been generated for the commit range v1.32.12…3c1400a on Thu, 10 Sep 2026 18:54:47 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz
  • cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.sha256sum
  • cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.bundle
  • cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx
  • cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx.bundle
• cri-o.arm64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz
  • cri-o.arm64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.sha256sum
  • cri-o.arm64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.bundle
  • cri-o.arm64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx
  • cri-o.arm64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx.bundle
• cri-o.ppc64le.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz
  • cri-o.ppc64le.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.sha256sum
  • cri-o.ppc64le.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.bundle
  • cri-o.ppc64le.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx
  • cri-o.ppc64le.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx.bundle
• cri-o.s390x.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz
  • cri-o.s390x.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.sha256sum
  • cri-o.s390x.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.bundle
  • cri-o.s390x.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx
  • cri-o.s390x.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx.bundle

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --bundle cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.bundle

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz
> bom validate -e cri-o.amd64.3c1400a7992e012501dd9d72a2ee831f428a3f98.tar.gz.spdx -d cri-o

Changelog since v1.32.12

Changes by Kind

Dependency-Change

• Fix CVE-2026-35469 by updating spdystream dependency (#9889, @haircommander)

Feature

• Add min_injected_gomaxprocs option, which allows a user to specify GOMAXPROCS in every container CRI-O creates. The config field itself is an integer that represents the floor of GOMAXPROCS. CRI-O will inject max(floor, cpu.request), if the pod is not a guaranteed pod or is part of a partitioned workload (#10010, @haircommander)

Bug or Regression

• Respect user specified selinux label for systemd or init container. (#9722, @bitoku)

Uncategorized

• Update gomaxprocs hook to ignore workload partitioning when considering whether to inject, as well as update the calculation to ensure containers get at least double the requested number of CPUs, to reduce potential go scheduler throttling. (#10068, @openshift-cherrypick-robot)

Dependencies

Added

• github.com/openshift-sustaining/go-jose/v4: v4.0.5-sec.1

Changed

• github.com/moby/spdystream: v0.4.0 → v0.5.1

Removed

• github.com/go-jose/go-jose/v4: v4.0.5