chore(deps): refresh rpm lockfiles [SECURITY]

[konflux-internal-p02]

This PR contains the following updates:

File rpms.in.yaml:

Package	Change
conmon	3:2.1.10-1.module+el8.10.0+23320+f7205097 -> 3:2.1.10-1.module+el8.10.0+23498+f7d19d48
container-selinux	2:2.229.0-2.module+el8.10.0+23320+f7205097 -> 2:2.229.0-2.module+el8.10.0+23498+f7d19d48
containernetworking-plugins	1:1.4.0-6.module+el8.10.0+23320+f7205097 -> 1:1.4.0-6.module+el8.10.0+23498+f7d19d48
containers-common	2:1-82.module+el8.10.0+23320+f7205097 -> 2:1-82.module+el8.10.0+23498+f7d19d48
criu	3.18-5.module+el8.10.0+23320+f7205097 -> 3.18-5.module+el8.10.0+23498+f7d19d48
dnsmasq	2.79-33.el8_10 -> 2.79-35.el8_10
fuse-overlayfs	1.13-1.module+el8.10.0+23320+f7205097 -> 1.13-1.module+el8.10.0+23498+f7d19d48
libslirp	4.4.0-2.module+el8.10.0+23320+f7205097 -> 4.4.0-2.module+el8.10.0+23498+f7d19d48
platform-python-devel	3.6.8-70.el8_10 -> 3.6.8-71.el8_10
podman	4:4.9.4-22.module+el8.10.0+23320+f7205097 -> 4:4.9.4-23.module+el8.10.0+23498+f7d19d48
podman-catatonit	4:4.9.4-22.module+el8.10.0+23320+f7205097 -> 4:4.9.4-23.module+el8.10.0+23498+f7d19d48
podman-gvproxy	4:4.9.4-22.module+el8.10.0+23320+f7205097 -> 4:4.9.4-23.module+el8.10.0+23498+f7d19d48
podman-plugins	4:4.9.4-22.module+el8.10.0+23320+f7205097 -> 4:4.9.4-23.module+el8.10.0+23498+f7d19d48
runc	1:1.1.12-6.module+el8.10.0+23320+f7205097 -> 1:1.1.12-6.module+el8.10.0+23498+f7d19d48
slirp4netns	1.2.3-1.module+el8.10.0+23320+f7205097 -> 1.2.3-1.module+el8.10.0+23498+f7d19d48
bash	4.4.20-5.el8 -> 4.4.20-6.el8_10
ca-certificates	2024.2.69_v8.0.303-80.0.el8_10 -> 2025.2.80_v9.0.304-80.2.el8_10
curl	7.61.1-34.el8_10.3 -> 7.61.1-34.el8_10.8
dbus	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
dbus-common	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
dbus-daemon	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
dbus-libs	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
dbus-tools	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
e2fsprogs	1.45.6-6.el8_10 -> 1.45.6-7.el8_10
e2fsprogs-libs	1.45.6-6.el8_10 -> 1.45.6-7.el8_10
file	5.33-26.el8 -> 5.33-27.el8_10
file-libs	5.33-26.el8 -> 5.33-27.el8_10
glibc	2.28-251.el8_10.22 -> 2.28-251.el8_10.25
glibc-all-langpacks	2.28-251.el8_10.22 -> 2.28-251.el8_10.25
glibc-common	2.28-251.el8_10.22 -> 2.28-251.el8_10.25
glibc-gconv-extra	2.28-251.el8_10.22 -> 2.28-251.el8_10.25
gnutls	3.6.16-8.el8_10.3 -> 3.6.16-8.el8_10.4
grub2-common	1:2.02-167.el8_10 -> 1:2.02-169.el8_10
grub2-tools	1:2.02-167.el8_10 -> 1:2.02-169.el8_10
grub2-tools-minimal	1:2.02-167.el8_10 -> 1:2.02-169.el8_10
libarchive	3.3.3-5.el8 -> 3.3.3-6.el8_10
libcom_err	1.45.6-6.el8_10 -> 1.45.6-7.el8_10
libcurl	7.61.1-34.el8_10.3 -> 7.61.1-34.el8_10.8
libgcc	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libgfortran	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libgomp	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libquadmath	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libss	1.45.6-6.el8_10 -> 1.45.6-7.el8_10
libssh	0.9.6-14.el8 -> 0.9.6-15.el8_10
libssh-config	0.9.6-14.el8 -> 0.9.6-15.el8_10
libstdc++	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libxml2	2.9.7-21.el8_10.1 -> 2.9.7-21.el8_10.3
libxslt	1.1.32-6.2.el8_10 -> 1.1.32-6.3.el8_10
openssh	8.0p1-25.el8_10 -> 8.0p1-26.el8_10
openssh-clients	8.0p1-25.el8_10 -> 8.0p1-26.el8_10
pam	1.3.1-37.el8_10 -> 1.3.1-38.el8_10
platform-python	3.6.8-70.el8_10 -> 3.6.8-71.el8_10
python3-cryptography	3.2.1-7.el8_9 -> 3.2.1-8.el8_10
python3-libs	3.6.8-70.el8_10 -> 3.6.8-71.el8_10
python3-requests	2.20.0-5.el8_10 -> 2.20.0-6.el8_10
sqlite-libs	3.26.0-19.el8_9 -> 3.26.0-20.el8_10
sudo	1.9.5p2-1.el8_10.1 -> 1.9.5p2-1.el8_10.2
tar	2:1.30-10.el8_10 -> 2:1.30-11.el8_10
vim-minimal	2:8.0.1763-19.el8_6.4 -> 2:8.0.1763-21.el8_10
which	2.21-20.el8 -> 2.21-21.el8_10
libatomic	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
s390utils-base	2:2.29.0-3.el8_10.1 -> 2:2.29.0-3.el8_10.3
s390utils-core	2:2.29.0-3.el8_10.1 -> 2:2.29.0-3.el8_10.3
s390utils-se-data	2:2.29.0-3.el8_10.1 -> 2:2.29.0-3.el8_10.3

---

cpython: Cpython infinite loop when parsing a tarfile

CVE-2025-8194

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-8194
• https://bugzilla.redhat.com/show_bug.cgi?id=2384043
• https://www.cve.org/CVERecord?id=CVE-2025-8194
• https://nvd.nist.gov/vuln/detail/CVE-2025-8194
• https://github.com/python/cpython/issues/130577
• https://github.com/python/cpython/pull/137027
• https://mail.python.org/archives/list/[email protected]/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/

---

glibc: Double free in glibc

CVE-2025-8058

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-8058
• https://bugzilla.redhat.com/show_bug.cgi?id=2383146
• https://www.cve.org/CVERecord?id=CVE-2025-8058
• https://nvd.nist.gov/vuln/detail/CVE-2025-8058
• https://sourceware.org/bugzilla/show_bug.cgi?id=33185
• https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f

---

gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()

CVE-2025-6395

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-6395
• https://bugzilla.redhat.com/show_bug.cgi?id=2376755
• https://www.cve.org/CVERecord?id=CVE-2025-6395
• https://nvd.nist.gov/vuln/detail/CVE-2025-6395

---

gnutls: Vulnerability in GnuTLS certtool template parsing

CVE-2025-32990

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-32990
• https://bugzilla.redhat.com/show_bug.cgi?id=2359620
• https://www.cve.org/CVERecord?id=CVE-2025-32990
• https://nvd.nist.gov/vuln/detail/CVE-2025-32990

---

gnutls: Vulnerability in GnuTLS otherName SAN export

CVE-2025-32988

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-32988
• https://bugzilla.redhat.com/show_bug.cgi?id=2359622
• https://www.cve.org/CVERecord?id=CVE-2025-32988
• https://nvd.nist.gov/vuln/detail/CVE-2025-32988

---

libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

CVE-2025-5914

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-5914
• https://bugzilla.redhat.com/show_bug.cgi?id=2370861
• https://www.cve.org/CVERecord?id=CVE-2025-5914
• https://nvd.nist.gov/vuln/detail/CVE-2025-5914
• https://github.com/libarchive/libarchive/pull/2598
• https://github.com/libarchive/libarchive/releases/tag/v3.8.0

---

libssh: out-of-bounds read in sftp_handle()

CVE-2025-5318

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-5318
• https://bugzilla.redhat.com/show_bug.cgi?id=2369131
• https://www.cve.org/CVERecord?id=CVE-2025-5318
• https://nvd.nist.gov/vuln/detail/CVE-2025-5318
• https://www.libssh.org/security/advisories/CVE-2025-5318.txt

---

libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

CVE-2025-7425

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-7425
• https://bugzilla.redhat.com/show_bug.cgi?id=2379274
• https://www.cve.org/CVERecord?id=CVE-2025-7425
• https://nvd.nist.gov/vuln/detail/CVE-2025-7425
• https://gitlab.gnome.org/GNOME/libxslt/-/issues/140

---

libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

CVE-2025-32415

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-32415
• https://bugzilla.redhat.com/show_bug.cgi?id=2360768
• https://www.cve.org/CVERecord?id=CVE-2025-32415
• https://nvd.nist.gov/vuln/detail/CVE-2025-32415
• https://gitlab.gnome.org/GNOME/libxml2/-/issues/890

---

openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled

CVE-2025-26465

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-26465
• https://bugzilla.redhat.com/show_bug.cgi?id=2344780
• https://www.cve.org/CVERecord?id=CVE-2025-26465
• https://nvd.nist.gov/vuln/detail/CVE-2025-26465
• https://access.redhat.com/solutions/7109879
• https://seclists.org/oss-sec/2025/q1/144

---

linux-pam: Incomplete fix for CVE-2025-6020

CVE-2025-8941

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-8941
• https://bugzilla.redhat.com/show_bug.cgi?id=2388220
• https://www.cve.org/CVERecord?id=CVE-2025-8941
• https://nvd.nist.gov/vuln/detail/CVE-2025-8941

---

linux-pam: Linux-pam directory Traversal

CVE-2025-6020

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-6020
• https://bugzilla.redhat.com/show_bug.cgi?id=2372512
• https://www.cve.org/CVERecord?id=CVE-2025-6020
• https://nvd.nist.gov/vuln/detail/CVE-2025-6020

---

python-cryptography: NULL-dereference when loading PKCS7 certificates

CVE-2023-49083

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2023-49083
• https://bugzilla.redhat.com/show_bug.cgi?id=2255331
• https://www.cve.org/CVERecord?id=CVE-2023-49083
• https://nvd.nist.gov/vuln/detail/CVE-2023-49083
• https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a
• https://github.com/pyca/cryptography/pull/9926
• https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97

---

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

CVE-2024-47081

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2024-47081
• https://bugzilla.redhat.com/show_bug.cgi?id=2371272
• https://www.cve.org/CVERecord?id=CVE-2024-47081
• https://nvd.nist.gov/vuln/detail/CVE-2024-47081
• http://seclists.org/fulldisclosure/2025/Jun/2
• http://www.openwall.com/lists/oss-security/2025/06/03/11
• http://www.openwall.com/lists/oss-security/2025/06/03/9
• http://www.openwall.com/lists/oss-security/2025/06/04/1
• http://www.openwall.com/lists/oss-security/2025/06/04/6
• https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef
• https://github.com/psf/requests/pull/6965
• https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7
• https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env
• https://seclists.org/fulldisclosure/2025/Jun/2

---

sqlite: Integer Truncation in SQLite

CVE-2025-6965

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-6965
• https://bugzilla.redhat.com/show_bug.cgi?id=2380149
• https://www.cve.org/CVERecord?id=CVE-2025-6965
• https://nvd.nist.gov/vuln/detail/CVE-2025-6965
• https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).