[AUTO-CHERRYPICK] [2.0] Upgrade nvidia-container-toolkit and libnvidia-container to 1.17.8 to resolve CVE-2025-23266 - branch main (microsoft#14386)

Co-authored-by: Sam Meluch <[email protected]>

Author: CBL-Mariner-Bot

SPECS/libnvidia-container/libnvidia-container.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
     "nvidia-modprobe-550.54.14.tar.gz": "5687b0dfa6087dd480ae91e91ff1dca975794e35a2edcf9ec08d8f9cb98ef905",
-    "libnvidia-container-1.17.4.tar.gz": "dca982cb83a5937c4533e707dc8fb1070496dff989d71319b64e698519b3a0b9"
+    "libnvidia-container-1.17.8.tar.gz": "4a85cb927954a4751b0695de03d6a49a3c79bb2fcaf687bbf1b7d081a956319f"
   }
 }

SPECS/libnvidia-container/libnvidia-container.spec

@@ -3,7 +3,7 @@
 %define mod_probe_dir deps/src/nvidia-modprobe-%{modprobe_version}
 Summary:        NVIDIA container runtime library
 Name:           libnvidia-container
-Version:        1.17.4
+Version:        1.17.8
 Release:        1%{?dist}
 License:        BSD AND ASL2.0 AND GPLv3+ AND LGPLv3+ AND MIT AND GPLv2
 Vendor:         Microsoft Corporation
@@ -135,6 +135,9 @@ This package contains command-line tools that facilitate using the library.
 %{_bindir}/*
 
 %changelog
+* Thu Jul 24 2025 Sam Meluch <[email protected]> - 1.17.8-1
+- Upgrade to version 1.17.8 in sync with nvidia-container-toolkit
+
 * Fri Feb 14 2025 Mitch Zhu <[email protected]> - 1.17.4-1
 - Upgrade to version 1.17.4 to stay in sync with nvidia-container-toolkit.
 

SPECS/nvidia-container-toolkit/nvidia-container-toolkit.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
-    "nvidia-container-toolkit-1.17.4-vendor.tar.gz": "cf32482be12a65f1a5d8fd9cf4175824fe78f7f2dd022394568df18c4580b69a",
-    "nvidia-container-toolkit-1.17.4.tar.gz": "f960b9ec55e479e591c6deb10166c9c73a0cefc01c10659af6eaf3f17d96fd8c"
+    "nvidia-container-toolkit-1.17.8-vendor.tar.gz": "c19168dff49faeb886cc4d9a49bc9ce5e84996e66b68530eb68a7148334f8c56",
+    "nvidia-container-toolkit-1.17.8.tar.gz": "9ce6fc5dd355441febf0008d4fd48cc621b9ec936cad122c64d3f252ba845199"
   }
 }

SPECS/nvidia-container-toolkit/nvidia-container-toolkit.spec

@@ -1,7 +1,7 @@
 %global debug_package %{nil}
 Summary:        NVIDIA container runtime hook
 Name:           nvidia-container-toolkit
-Version:        1.17.4
+Version:        1.17.8
 Release:        1%{?dist}
 License:        ALS2.0
 Vendor:         Microsoft Corporation
@@ -88,6 +88,9 @@ rm -f %{_bindir}/nvidia-container-toolkit
 %{_bindir}/nvidia-cdi-hook
 
 %changelog
+* Thu Jul 24 2025 Sam Meluch <[email protected]> - 1.17.8-1
+- Upgrade to 1.17.8 to resolve CVE-2025-23266
+
 * Thu Feb 13 2025 Mitch Zhu <[email protected]> - 1.17.4-1
 - Upgrade to v1.17.4 to resolve CVE-2025-23359
 

cgmanifest.json

@@ -10341,8 +10341,8 @@
         "type": "other",
         "other": {
           "name": "libnvidia-container",
-          "version": "1.17.4",
-          "downloadUrl": "https://github.com/NVIDIA/libnvidia-container/archive/v1.17.4.tar.gz"
+          "version": "1.17.8",
+          "downloadUrl": "https://github.com/NVIDIA/libnvidia-container/archive/v1.17.8.tar.gz"
         }
       }
     },
@@ -14593,8 +14593,8 @@
         "type": "other",
         "other": {
           "name": "nvidia-container-toolkit",
-          "version": "1.17.4",
-          "downloadUrl": "https://github.com/NVIDIA/nvidia-container-toolkit/archive/v1.17.4.tar.gz"
+          "version": "1.17.8",
+          "downloadUrl": "https://github.com/NVIDIA/nvidia-container-toolkit/archive/v1.17.8.tar.gz"
         }
       }
     },