diff --git a/CHANGELOG.md b/CHANGELOG.md
index d82c0b5d..2a3c36e1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## v1.17.3
 - Only allow host-relative LDConfig paths by default.
+### Changes in libnvidia-container
+- Create virtual copy of host ldconfig binary before calling fexecve()
 
 ## v1.17.2
 - Fixed a bug where legacy images would set imex channels as `all`.
diff --git a/third_party/libnvidia-container b/third_party/libnvidia-container
index 63d366ee..16f37fca 160000
--- a/third_party/libnvidia-container
+++ b/third_party/libnvidia-container
@@ -1 +1 @@
-Subproject commit 63d366ee3b4183513c310ac557bf31b05b83328f
+Subproject commit 16f37fcafcbdaf67525135104d60d98d36688ba9