FEDORA-2025-e41c694c83 — security update for toolbox

stable

toolbox-0.2-1.fc42

FEDORA-2025-e41c694c83 created by rishi 11 months ago for Fedora 42

Security fixes

Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787
Bumped the minimum github.com/NVIDIA/nvidia-container-toolkit version to 1.17.8 for CVE-2025-23266 and CVE-2025-23267

Bug fixes

Improved error handling when creating symbolic links inside the container to initialize it
Preserved environment variables set by a KDE session and Konsole
Unbroke access to CA certificates in sshd(8) sessions (regression in 0.1.2)
Unbroke overriding the HOME variable (regression in 0.0.90)

Dependencies

Bumped the minimum Go version to 1.22

Logout Required

After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-e41c694c83

This update has been submitted for testing by rishi.

11 months ago

This update's test gating status has been changed to 'waiting'.

11 months ago

This update's test gating status has been changed to 'waiting'.

11 months ago

This update has been pushed to testing.

11 months ago

This update's test gating status has been changed to 'passed'.

11 months ago

geraldosimiao provided feedback 11 months ago

karma

besser82 commented & provided feedback 11 months ago

karma

Works great! LGTM! =)

This update can be pushed to stable now if the maintainer wishes

11 months ago

fredrik commented & provided feedback 11 months ago

karma

Works on Silverblue 42.20250810.0

This update has been submitted for stable by bodhi.

11 months ago

nathan95 provided feedback 11 months ago

karma

This update has been pushed to stable.

11 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

11 months ago

in testing

11 months ago

in stable

11 months ago

approved

11 months ago

Builds

toolbox-0.2-1.fc42

BZ#2375632 toolbox: mapstructure May Leak Sensitive Information [fedora-42]

BZ#2382220 CVE-2025-23266 toolbox: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit [fedora-42]

BZ#2387403 toolbox-0.2 is available

toolbox-0.2-1.fc42

Automated Test Results

passed

Test Cases


0	0	Test Case toolbox