Repository navigation
chore(deps): refresh rpm lockfiles [SECURITY] - #145
Merged
konflux-internal-p02[bot] merged 1 commit intoNov 14, 2026
Merged
konflux-internal-p02[bot] merged 1 commit into
konflux-internal-p02[bot] merged 1 commit into
Conversation
Signed-off-by: konflux-internal-p02 <170854209+konflux-internal-p02[bot]@users.noreply.github.com>
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
File deploy/konflux/cli/rpms.in.yaml:
5.1.0-6.el9_8.1->5.1.0-7.el93.1.5-8.el9->3.1.5-9.el98.32-41.el9_8.1->8.32-43.el98.32-41.el9_8.1->8.32-43.el920260224-1.gitea0f072.el9_8->20260714-1.git65b74f7.el92.5.0-6.el9_8.7->2.5.0-9.el9_9.45.1.0-6.el9_8.1->5.1.0-7.el92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.4.0-1.el9_8->2.4.0-2.el92.6.0-1.el9_8->2.6.0-2.el92.37.4-25.el9->2.37.4-28.el9_9.17.76.1-40.el9_8.9->7.76.1-43.el92.37.4-25.el9->2.37.4-28.el9_9.111.5.0-14.el9->11.5.0-17.el9_92.37.4-25.el9->2.37.4-28.el9_9.11.43.0-6.el9_8.2->1.43.0-8.el93.6-3.el9->3.6-4.el92.37.4-25.el9->2.37.4-28.el9_9.12.37.4-25.el9->2.37.4-28.el9_9.12.6.8-4.el9->2.6.13-1.el99.9p1-13.el9_8->9.9p1-16.el9_99.9p1-13.el9_8->9.9p1-16.el9_91:3.5.8-2.el9_8->1:3.5.9-1.el9_91:3.5.8-2.el9_8->1:3.5.9-1.el9_91.5.1-28.el9_8.1->1.5.1-29.el99.8-1.0.el9->9.9-1.0.el92:4.9-16.el9->2:4.9-17.el9252-67.el9_8.6->252-79.el9_92026f-1.el9_8->2026f-1.el9_92.37.4-25.el9->2.37.4-28.el9_9.12.37.4-25.el9->2.37.4-28.el9_9.15.2.5-8.el9_8.1->5.2.5-8.el9_9.1File deploy/konflux/e2e-odh/rpms.in.yaml:
1.1.34-14.el9_8.1->1.1.34-16.el93.1.5-8.el9->3.1.5-9.el98.32-41.el9_8.1->8.32-43.el98.32-41.el9_8.1->8.32-43.el920260224-1.gitea0f072.el9_8->20260714-1.git65b74f7.el920260224-1.gitea0f072.el9_8->20260714-1.git65b74f7.el92.5.0-6.el9_8.7->2.5.0-9.el9_9.45.1.0-6.el9_8.1->5.1.0-7.el92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.4.0-1.el9_8->2.4.0-2.el92.6.0-1.el9_8->2.6.0-2.el92.37.4-25.el9->2.37.4-28.el9_9.17.76.1-40.el9_8.9->7.76.1-43.el92.37.4-25.el9->2.37.4-28.el9_9.111.5.0-14.el9->11.5.0-17.el9_92.37.4-25.el9->2.37.4-28.el9_9.11.43.0-6.el9_8.2->1.43.0-8.el93.6-3.el9->3.6-4.el92.37.4-25.el9->2.37.4-28.el9_9.12.37.4-25.el9->2.37.4-28.el9_9.12.9.13-14.el9_8.5->2.9.13-18.el9_9.12.6.8-4.el9->2.6.13-1.el99.9p1-13.el9_8->9.9p1-16.el9_99.9p1-13.el9_8->9.9p1-16.el9_91:3.5.8-2.el9_8->1:3.5.9-1.el9_91:3.5.8-2.el9_8->1:3.5.9-1.el9_91.5.1-28.el9_8.1->1.5.1-29.el93.9.25-7.el9_8.6->3.9.25-16.el9_93.9.25-7.el9_8.6->3.9.25-16.el9_99.8-1.0.el9->9.9-1.0.el92:4.9-16.el9->2:4.9-17.el9252-67.el9_8.6->252-79.el9_92026f-1.el9_8->2026f-1.el9_92.37.4-25.el9->2.37.4-28.el9_9.12.37.4-25.el9->2.37.4-28.el9_9.15.2.5-8.el9_8.1->5.2.5-8.el9_9.1File deploy/konflux/gateway/rpms.in.yaml:
8.32-41.el9_8.1->8.32-43.el98.32-41.el9_8.1->8.32-43.el920260224-1.gitea0f072.el9_8->20260714-1.git65b74f7.el92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.4.0-1.el9_8->2.4.0-2.el92.6.0-1.el9_8->2.6.0-2.el911.5.0-14.el9->11.5.0-17.el9_93.6-3.el9->3.6-4.el91:3.5.8-2.el9_8->1:3.5.9-1.el9_99.8-1.0.el9->9.9-1.0.el92026f-1.el9_8->2026f-1.el9_9File deploy/konflux/openclaw/rpms.in.yaml:
8.32-41.el9_8.1->8.32-43.el98.32-41.el9_8.1->8.32-43.el920260224-1.gitea0f072.el9_8->20260714-1.git65b74f7.el920260224-1.gitea0f072.el9_8->20260714-1.git65b74f7.el92.5.0-6.el9_8.7->2.5.0-9.el9_9.42.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.4.0-1.el9_8->2.4.0-2.el92.6.0-1.el9_8->2.6.0-2.el911.5.0-14.el9->11.5.0-17.el9_93.6-3.el9->3.6-4.el92.37.4-25.el9->2.37.4-28.el9_9.11:3.5.8-2.el9_8->1:3.5.9-1.el9_93.9.25-7.el9_8.6->3.9.25-16.el9_93.9.25-7.el9_8.6->3.9.25-16.el9_99.8-1.0.el9->9.9-1.0.el92026f-1.el9_8->2026f-1.el9_95.2.5-8.el9_8.1->5.2.5-8.el9_9.1File deploy/konflux/sandbox/rpms.in.yaml:
2.34-284.el9_8.4->2.34-290.el9_95.14.0-687.66.1.el9_8->5.14.0-741.22.1.el9_92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_911.5.0-14.el9->11.5.0-17.el9_99.8-1.0.el9->9.9-1.0.el92026f-1.el9_8->2026f-1.el9_92.34-284.el9_8.4->2.34-290.el9_92.34-284.el9_8.4->2.34-290.el9_9glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
CVE-2026-86805
More information
Severity
Moderate
References
glibc: nscd stack overflow leads to degraded DNS resolution
CVE-2026-89092
More information
Severity
Moderate
References
glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
CVE-2026-95818
More information
Severity
Moderate
References
gcc: libstdc++ integer overflow in
newoperatorCVE-2026-95619
More information
Severity
Moderate
References
gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if
CVE-2026-102010
More information
Severity
Moderate
References
gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std
CVE-2026-114690
More information
Severity
Moderate
References
gcc: Integer wrap in `std
CVE-2026-114691
More information
Severity
Moderate
References
gcc: Out-of-bounds read in std::from_chars
CVE-2026-115456
More information
Severity
Moderate
References
expat: Expat: Denial of Service via quadratic complexity in attribute processing
CVE-2026-66046
More information
Severity
Important
References
expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer
CVE-2026-77214
More information
Severity
Important
References
expat: Expat: XML Injection via Malformed UTF-16 Input
CVE-2026-93990
More information
Severity
Important
References
expat: expat: Denial of Service via integer overflow in expat_realloc
CVE-2026-102633
More information
Severity
Important
References
acl: Symlink traversal privilege escalation via libacl functions
CVE-2026-54369
More information
Severity
Important
References
acl: TOCTOU Symlink Traversal via getfacl/setfacl
CVE-2026-54370
More information
Severity
Important
References
attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr
CVE-2026-54371
More information
Severity
Moderate
References
util-linux: util-linux: heap use-after-free in libblkid nested partition probing
CVE-2026-13595
More information
Severity
Important
References
util-linux: TOCTOU in the mount program via ancestor directory swap on target path
CVE-2026-53613
More information
Severity
Important
References
util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
CVE-2026-53615
More information
Severity
Important
References
python: python: Arbitrary file deletion via race condition during temporary directory cleanup
CVE-2026-12345
More information
Severity
Moderate
References
python: Use-after-free of a server-side SSLContext when sni_callback switches contexts
CVE-2026-19445
More information
Severity
Moderate
References
python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()
CVE-2026-19553
More information
Severity
Moderate
References
python: python: Arbitrary file write via tarfile extraction filter bypass
CVE-2026-114583
More information
Severity
Moderate
References
python: python: Misinterpretation of HTTP responses via invalid chunk parsing
CVE-2026-103995
More information
Severity
Moderate
References
python: Distrust compromised eMudhra intermediate certificates in Python ssl module
CVE-2026-115557
More information
Severity
Moderate
References
xz: XZ Utils: Denial of Service via buffer overflow in index decoding
CVE-2026-34743
More information
Severity
Moderate
References
curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse
CVE-2026-5545
More information
Severity
Moderate
References
curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies
CVE-2026-6253
More information
Severity
Moderate
References
curl: libcurl: Credential leak via reused proxy connection during HTTP redirects
CVE-2026-6429
More information
Severity
Moderate
References
curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse
CVE-2026-7168
More information
Severity
Moderate
References
libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free
CVE-2026-6653
More information
Severity
Important
References
libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow
CVE-2026-11979
More information
Severity
Important
References
libxml2: double-free/UAF in libxml2 Python bindings
CVE-2026-74860
More information
Severity
Important
References
libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow
CVE-2026-86138
More information
Severity
Important
References
libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements
CVE-2026-86140
More information
Severity
Important
References
libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation
CVE-2026-86142
More information
Severity
Important
References
libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks
CVE-2026-86143
More information
Severity
Important
References
libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation.
CVE-2026-86144
More information
Severity
Important
References
openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw
CVE-2026-59997
More information
Severity
Moderate
References
openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory
CVE-2026-59998
More information
Severity
Moderate
References
openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts
CVE-2026-60000
More information
Severity
Moderate
References
🔧 This Pull Request updates lock files to use the latest dependency versions.
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.