Fedora Linux 9183 Published by

There are two Fedora updates available for Apptainer, a tool used for application and environment virtualization. The first update is for Fedora 43 (FEDORA-2025-cf169a01e8) and the second is for Fedora 42 (FEDORA-2025-ff963b3775). Both updates include fixes for CVE-2025-65105, which was introduced in upstream version 1.4.5. Additionally, the update includes patches for fuse2fs that were accidentally empty.

Fedora 43 Update: apptainer-1.4.5-2.fc43
Fedora 42 Update: apptainer-1.4.5-2.fc42




[SECURITY] Fedora 43 Update: apptainer-1.4.5-2.fc43


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-cf169a01e8
2025-12-13 01:11:43.383959+00:00
--------------------------------------------------------------------------------

Name : apptainer
Product : Fedora 43
Version : 1.4.5
Release : 2.fc43
URL : https://apptainer.org
Summary : Application and environment virtualization formerly known as Singularity
Description :
Apptainer provides functionality to make portable
containers that can be used across host environments.

--------------------------------------------------------------------------------
Update Information:

Apply fuse2fs patches that were accidentally empty
Update to upstream 1.4.5, including a fix for CVE-2025-65105
--------------------------------------------------------------------------------
ChangeLog:

* Tue Dec 2 2025 Dave Dykstra [dwd@cern.ch] - 1.4.5-2
- Include the real patches for e2fsprogs instead of empty files. Fixes
BZ#2417548.
* Mon Dec 1 2025 Dave Dykstra [dwd@cern.ch] - 1.4.5
- Update to upstream 1.4.5
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2417548 - overlay functionality seems broken in 1.4.4-1.el9
https://bugzilla.redhat.com/show_bug.cgi?id=2417548
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-cf169a01e8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 42 Update: apptainer-1.4.5-2.fc42


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-ff963b3775
2025-12-13 00:49:56.741363+00:00
--------------------------------------------------------------------------------

Name : apptainer
Product : Fedora 42
Version : 1.4.5
Release : 2.fc42
URL : https://apptainer.org
Summary : Application and environment virtualization formerly known as Singularity
Description :
Apptainer provides functionality to make portable
containers that can be used across host environments.

--------------------------------------------------------------------------------
Update Information:

Apply fuse2fs patches that were accidentally empty
Update to upstream 1.4.5, including a fix for CVE-2025-65105
--------------------------------------------------------------------------------
ChangeLog:

* Tue Dec 2 2025 Dave Dykstra [dwd@cern.ch] - 1.4.5-2
- Include the real patches for e2fsprogs instead of empty files. Fixes
BZ#2417548.
* Mon Dec 1 2025 Dave Dykstra [dwd@cern.ch] - 1.4.5
- Update to upstream 1.4.5
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2417548 - overlay functionality seems broken in 1.4.4-1.el9
https://bugzilla.redhat.com/show_bug.cgi?id=2417548
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-ff963b3775' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--