FEDORA-2025-ab370b9ac9 — security update for toolbox

stable

toolbox-0.2-1.fc41

FEDORA-2025-ab370b9ac9 created by rishi 5 months ago for Fedora 41

Security fixes

Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787
Bumped the minimum github.com/NVIDIA/nvidia-container-toolkit version to 1.17.8 for CVE-2025-23266 and CVE-2025-23267

Bug fixes

Improved error handling when creating symbolic links inside the container to initialize it
Preserved environment variables set by a KDE session and Konsole
Unbroke access to CA certificates in sshd(8) sessions (regression in 0.1.2)
Unbroke overriding the HOME variable (regression in 0.0.90)

Dependencies

Bumped the minimum Go version to 1.22

Logout Required

After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-ab370b9ac9

This update has been submitted for testing by rishi.

5 months ago

This update's test gating status has been changed to 'waiting'.

5 months ago

This update's test gating status has been changed to 'waiting'.

5 months ago

This update's test gating status has been changed to 'passed'.

5 months ago

This update has been pushed to testing.

5 months ago

derekenz commented & provided feedback 5 months ago

karma

Works

This update has been submitted for stable by bodhi.

5 months ago

This update has been pushed to stable.

5 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

5 months ago

in testing

5 months ago

in stable

5 months ago

approved

5 months ago

Builds

toolbox-0.2-1.fc41

BZ#2375617 toolbox: mapstructure May Leak Sensitive Information [fedora-41]

BZ#2382219 CVE-2025-23266 toolbox: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit [fedora-41]

BZ#2387403 toolbox-0.2 is available

toolbox-0.2-1.fc41

Automated Test Results

passed

Test Cases


0	0	Test Case toolbox