[AUTO-CHERRYPICK] [3.0] Upgrade nvidia-container-toolkit and libnvidia-container to 1.17.8 to resolve CVE-2025-23266 - branch 3.0-dev (microsoft#14385)

Co-authored-by: Sam Meluch <[email protected]>

Author: CBL-Mariner-Bot

SPECS/libnvidia-container/libnvidia-container.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
     "nvidia-modprobe-550.54.14.tar.gz": "5687b0dfa6087dd480ae91e91ff1dca975794e35a2edcf9ec08d8f9cb98ef905",
-    "libnvidia-container-1.17.4.tar.gz": "dca982cb83a5937c4533e707dc8fb1070496dff989d71319b64e698519b3a0b9"
+    "libnvidia-container-1.17.8.tar.gz": "4a85cb927954a4751b0695de03d6a49a3c79bb2fcaf687bbf1b7d081a956319f"
   }
 }

SPECS/libnvidia-container/libnvidia-container.spec

@@ -3,8 +3,8 @@
 %define mod_probe_dir deps/src/nvidia-modprobe-%{modprobe_version}
 Summary:        NVIDIA container runtime library
 Name:           libnvidia-container
-Version:        1.17.4
-Release:        2%{?dist}
+Version:        1.17.8
+Release:        1%{?dist}
 License:        BSD AND ASL2.0 AND GPLv3+ AND LGPLv3+ AND MIT AND GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -135,6 +135,9 @@ This package contains command-line tools that facilitate using the library.
 %{_bindir}/*
 
 %changelog
+* Thu Jul 24 2025 Sam Meluch <[email protected]> - 1.17.8-1
+- Upgrade to version 1.17.8 in sync with nvidia-container-toolkit
+
 * Mon Mar 10 2025 Jon Slobodzian <[email protected]> - 1.17.4-2
 - The Golang 1.24 breaks this build.  Changed BuildRequires to specify a lower version.
 

SPECS/nvidia-container-toolkit/nvidia-container-toolkit.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
-    "nvidia-container-toolkit-1.17.4-vendor.tar.gz": "cf32482be12a65f1a5d8fd9cf4175824fe78f7f2dd022394568df18c4580b69a",
-    "nvidia-container-toolkit-1.17.4.tar.gz": "f960b9ec55e479e591c6deb10166c9c73a0cefc01c10659af6eaf3f17d96fd8c"
+    "nvidia-container-toolkit-1.17.8-vendor.tar.gz": "c19168dff49faeb886cc4d9a49bc9ce5e84996e66b68530eb68a7148334f8c56",
+    "nvidia-container-toolkit-1.17.8.tar.gz": "9ce6fc5dd355441febf0008d4fd48cc621b9ec936cad122c64d3f252ba845199"
   }
 }

SPECS/nvidia-container-toolkit/nvidia-container-toolkit.spec

@@ -1,8 +1,8 @@
 %global debug_package %{nil}
 Summary:        NVIDIA container runtime hook
 Name:           nvidia-container-toolkit
-Version:        1.17.4
-Release:        3%{?dist}
+Version:        1.17.8
+Release:        1%{?dist}
 License:        ALS2.0
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -87,6 +87,9 @@ rm -f %{_bindir}/nvidia-container-toolkit
 %{_bindir}/nvidia-cdi-hook
 
 %changelog
+* Thu Jul 24 2025 Sam Meluch <[email protected]> - 1.17.8-1
+- Upgrade to 1.17.8 to resolve CVE-2025-23266
+
 * Thu Apr 10 2025 Kanishk Bansal <[email protected]> - 1.17.4-3
 - Removed extraction command from prep
 

cgmanifest.json

@@ -10501,8 +10501,8 @@
         "type": "other",
         "other": {
           "name": "libnvidia-container",
-          "version": "1.17.4",
-          "downloadUrl": "https://github.com/NVIDIA/libnvidia-container/archive/v1.17.4.tar.gz"
+          "version": "1.17.8",
+          "downloadUrl": "https://github.com/NVIDIA/libnvidia-container/archive/v1.17.8.tar.gz"
         }
       }
     },
@@ -14522,8 +14522,8 @@
         "type": "other",
         "other": {
           "name": "nvidia-container-toolkit",
-          "version": "1.17.4",
-          "downloadUrl": "https://github.com/NVIDIA/nvidia-container-toolkit/archive/v1.17.4.tar.gz"
+          "version": "1.17.8",
+          "downloadUrl": "https://github.com/NVIDIA/nvidia-container-toolkit/archive/v1.17.8.tar.gz"
         }
       }
     },