diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2df3ba623a8..c46eb3ed913 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,11 @@
 
 # Changelog
 
+## v1.33.7 (2024-03-18)
+
+    CVE-2024-1753 container escape fix
+    tests: skip_if_no_unshare(): check for --setuid
+
 ## v1.33.6 (2024-02-14)
 
     [release-1.33] Bump golang.org/x/crypto v0.17.0
diff --git a/changelog.txt b/changelog.txt
index 2095b0e8ca0..ef2049f38a2 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,3 +1,7 @@
+- Changelog for v1.33.7 (2024-03-18)
+  * CVE-2024-1753 container escape fix
+  * tests: skip_if_no_unshare(): check for --setuid
+
 -Changelog for v1.33.6 (2024-02-14)
 
   * [release-1.33] Bump golang.org/x/crypto v0.17.0
diff --git a/define/types.go b/define/types.go
index 120307f8e51..50adce015b3 100644
--- a/define/types.go
+++ b/define/types.go
@@ -29,7 +29,7 @@ const (
 	// identify working containers.
 	Package = "buildah"
 	// Version for the Package. Also used by .packit.sh for Packit builds.
-	Version = "1.33.6"
+	Version = "1.33.7"
 
 	// DefaultRuntime if containers.conf fails.
 	DefaultRuntime = "runc"