An important security update for Apptainer, the containerization tool formerly known as Singularity, has been released for Fedora Linux 41. The update, identified as apptainer-1.4.2-1.fc41, addresses a critical vulnerability (CVE-2025-22870) related to HTTP proxy bypass using IPv6 Zone IDs in the Golang library.

Update Details:

- Update Version: apptainer-1.4.2
- Release Date: August 17, 2025
- Maintainer: Dave Dykstra
- URL: [Apptainer Official Site](https://apptainer.org)

Description:

Apptainer allows users to create portable containers that function uniformly across various host environments, enhancing application deployment’s flexibility and security.

Installation Instructions:

Users can apply the update using the command line with the DNF package manager. The following command should be executed:

bashsu -c 'dnf upgrade --advisory FEDORA-2025-5b1e8725d7'

For further information on DNF commands, users can refer to the DNF documentation [here](http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label).

References:

- A bug report detailing the vulnerability can be found [here](https://bugzilla.redhat.com/show_bug.cgi?id=2352134).
- Additional information regarding the availability of Apptainer-1.4.2 can be accessed [here](https://bugzilla.redhat.com/show_bug.cgi?id=2387209).

Security Assurance:

All packages delivered through this update are signed with the Fedora Project GPG key, ensuring their authenticity. More information regarding the GPG keys used by the Fedora Project can be found [here](https://fedoraproject.org/keys).

Conclusion:

It's crucial for users of Fedora 41 to update their Apptainer installation promptly to mitigate security risks associated with the identified vulnerability. Regular updates and security patches are vital for maintaining system integrity and protecting against potential threats

Apptainer update for Fedora 41

An Apptainer security update has been released for Fedora Linux 41:

Fedora 41 Update: apptainer-1.4.2-1.fc41

Apptainer update for Fedora 41 @ Linux Compatible