chore(deps): rpm updates - abandoned

[konflux-internal-p02]

This PR contains the following updates:

Package	Update	Change
bash	patch	4.4.20-5.el8 -> 4.4.20-6.el8_10
dbus	patch	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
dbus-common	patch	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
dbus-daemon	patch	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
dbus-libs	patch	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
dbus-tools	patch	1:1.12.8-26.el8 -> 1:1.12.8-27.el8_10
glibc	patch	2.28-251.el8_10.22 -> 2.28-251.el8_10.25
glibc-all-langpacks	patch	2.28-251.el8_10.22 -> 2.28-251.el8_10.25
glibc-common	patch	2.28-251.el8_10.22 -> 2.28-251.el8_10.25
glibc-gconv-extra	patch	2.28-251.el8_10.22 -> 2.28-251.el8_10.25
libarchive	patch	3.3.3-5.el8 -> 3.3.3-6.el8_10
libatomic	patch	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libgcc	patch	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libgfortran	patch	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libgomp	patch	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libquadmath	patch	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libstdc++	patch	8.5.0-26.el8_10 -> 8.5.0-28.el8_10
libxml2	patch	2.9.7-21.el8_10.1 -> 2.9.7-21.el8_10.3
libxslt	patch	1.1.32-6.2.el8_10 -> 1.1.32-6.3.el8_10
pam	patch	1.3.1-37.el8_10 -> 1.3.1-38.el8_10
platform-python	patch	3.6.8-70.el8_10 -> 3.6.8-71.el8_10
platform-python-devel	patch	3.6.8-70.el8_10 -> 3.6.8-71.el8_10
python3-cryptography	patch	3.2.1-7.el8_9 -> 3.2.1-8.el8_10
python3-libs	patch	3.6.8-70.el8_10 -> 3.6.8-71.el8_10
python3-requests	patch	2.20.0-5.el8_10 -> 2.20.0-6.el8_10
sqlite-libs	patch	3.26.0-19.el8_9 -> 3.26.0-20.el8_10
sudo	patch	1.9.5p2-1.el8_10.1 -> 1.9.5p2-1.el8_10.2
tar	patch	2:1.30-10.el8_10 -> 2:1.30-11.el8_10
which	patch	2.21-20.el8 -> 2.21-21.el8_10

---

glibc: Double free in glibc

CVE-2025-8058

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-8058
• https://bugzilla.redhat.com/show_bug.cgi?id=2383146
• https://www.cve.org/CVERecord?id=CVE-2025-8058
• https://nvd.nist.gov/vuln/detail/CVE-2025-8058
• https://sourceware.org/bugzilla/show_bug.cgi?id=33185
• https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f

---

glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

CVE-2025-4802

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-4802
• https://bugzilla.redhat.com/show_bug.cgi?id=2367468
• https://www.cve.org/CVERecord?id=CVE-2025-4802
• https://nvd.nist.gov/vuln/detail/CVE-2025-4802
• https://www.openwall.com/lists/oss-security/2025/05/16/7
• https://www.openwall.com/lists/oss-security/2025/05/17/2

---

glibc: Vector register overwrite bug in glibc

CVE-2025-5702

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-5702
• https://bugzilla.redhat.com/show_bug.cgi?id=2370472
• https://www.cve.org/CVERecord?id=CVE-2025-5702
• https://nvd.nist.gov/vuln/detail/CVE-2025-5702
• https://sourceware.org/bugzilla/show_bug.cgi?id=33056

---

libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

CVE-2025-5914

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-5914
• https://bugzilla.redhat.com/show_bug.cgi?id=2370861
• https://www.cve.org/CVERecord?id=CVE-2025-5914
• https://nvd.nist.gov/vuln/detail/CVE-2025-5914
• https://github.com/libarchive/libarchive/pull/2598
• https://github.com/libarchive/libarchive/releases/tag/v3.8.0

---

libarchive: Buffer Overflow vulnerability in libarchive

CVE-2025-25724

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-25724
• https://bugzilla.redhat.com/show_bug.cgi?id=2349221
• https://www.cve.org/CVERecord?id=CVE-2025-25724
• https://nvd.nist.gov/vuln/detail/CVE-2025-25724
• https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92
• https://github.com/Ekkosun/pocs/blob/main/bsdtarbug
• https://github.com/libarchive/libarchive/blob/b439d586f53911c84be5e380445a8a259e19114c/tar/util.c#L751-L752

---

libarchive: heap buffer over-read in header_gnu_longlink

CVE-2024-57970

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2024-57970
• https://bugzilla.redhat.com/show_bug.cgi?id=2345954
• https://www.cve.org/CVERecord?id=CVE-2024-57970
• https://nvd.nist.gov/vuln/detail/CVE-2024-57970
• https://github.com/libarchive/libarchive/issues/2415
• https://github.com/libarchive/libarchive/pull/2422

---

libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

CVE-2025-7425

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-7425
• https://bugzilla.redhat.com/show_bug.cgi?id=2379274
• https://www.cve.org/CVERecord?id=CVE-2025-7425
• https://nvd.nist.gov/vuln/detail/CVE-2025-7425
• https://gitlab.gnome.org/GNOME/libxslt/-/issues/140

---

libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

CVE-2025-32415

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-32415
• https://bugzilla.redhat.com/show_bug.cgi?id=2360768
• https://www.cve.org/CVERecord?id=CVE-2025-32415
• https://nvd.nist.gov/vuln/detail/CVE-2025-32415
• https://gitlab.gnome.org/GNOME/libxml2/-/issues/890

---

libxml: Heap use after free (UAF) leads to Denial of service (DoS)

CVE-2025-49794

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-49794
• https://bugzilla.redhat.com/show_bug.cgi?id=2372373
• https://www.cve.org/CVERecord?id=CVE-2025-49794
• https://nvd.nist.gov/vuln/detail/CVE-2025-49794

---

libxml: Type confusion leads to Denial of service (DoS)

CVE-2025-49796

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-49796
• https://bugzilla.redhat.com/show_bug.cgi?id=2372385
• https://www.cve.org/CVERecord?id=CVE-2025-49796
• https://nvd.nist.gov/vuln/detail/CVE-2025-49796

---

libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

CVE-2025-6021

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-6021
• https://bugzilla.redhat.com/show_bug.cgi?id=2372406
• https://www.cve.org/CVERecord?id=CVE-2025-6021
• https://nvd.nist.gov/vuln/detail/CVE-2025-6021

---

libxml2: Out-of-Bounds Read in libxml2

CVE-2025-32414

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-32414
• https://bugzilla.redhat.com/show_bug.cgi?id=2358121
• https://www.cve.org/CVERecord?id=CVE-2025-32414
• https://nvd.nist.gov/vuln/detail/CVE-2025-32414
• https://gitlab.gnome.org/GNOME/libxml2/-/issues/889

---

libxml2: XXE vulnerability

CVE-2024-40896

More information

Severity

Critical

References

• https://access.redhat.com/security/cve/CVE-2024-40896
• https://bugzilla.redhat.com/show_bug.cgi?id=2333871
• https://www.cve.org/CVERecord?id=CVE-2024-40896
• https://nvd.nist.gov/vuln/detail/CVE-2024-40896
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/1a8932303969907f6572b1b6aac4081c56adb5c6
• https://gitlab.gnome.org/GNOME/libxml2/-/issues/761

---

libxml: Null pointer dereference leads to Denial of service (DoS)

CVE-2025-49795

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-49795
• https://bugzilla.redhat.com/show_bug.cgi?id=2372379
• https://www.cve.org/CVERecord?id=CVE-2025-49795
• https://nvd.nist.gov/vuln/detail/CVE-2025-49795

---

libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)

CVE-2024-55549

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2024-55549
• https://bugzilla.redhat.com/show_bug.cgi?id=2352484
• https://www.cve.org/CVERecord?id=CVE-2024-55549
• https://nvd.nist.gov/vuln/detail/CVE-2024-55549
• https://gitlab.gnome.org/GNOME/libxslt/-/issues/127

---

libxslt: Processing web content may disclose sensitive information

CVE-2023-40403

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2023-40403
• https://bugzilla.redhat.com/show_bug.cgi?id=2349766
• https://www.cve.org/CVERecord?id=CVE-2023-40403
• https://nvd.nist.gov/vuln/detail/CVE-2023-40403
• http://seclists.org/fulldisclosure/2023/Oct/10
• http://seclists.org/fulldisclosure/2023/Oct/3
• http://seclists.org/fulldisclosure/2023/Oct/4
• http://seclists.org/fulldisclosure/2023/Oct/5
• http://seclists.org/fulldisclosure/2023/Oct/6
• http://seclists.org/fulldisclosure/2023/Oct/8
• http://seclists.org/fulldisclosure/2023/Oct/9
• https://bugs.chromium.org/p/chromium/issues/detail?id=1356211
• https://bugzilla.gnome.org/show_bug.cgi?id=751621
• https://gitlab.gnome.org/GNOME/libxslt/-/issues/94
• https://support.apple.com/en-us/HT213927

---

libxslt: Use-After-Free in libxslt numbers.c

CVE-2025-24855

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-24855
• https://bugzilla.redhat.com/show_bug.cgi?id=2352483
• https://www.cve.org/CVERecord?id=CVE-2025-24855
• https://nvd.nist.gov/vuln/detail/CVE-2025-24855
• https://gitlab.gnome.org/GNOME/libxslt/-/issues/128

---

linux-pam: Incomplete fix for CVE-2025-6020

CVE-2025-8941

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-8941
• https://bugzilla.redhat.com/show_bug.cgi?id=2388220
• https://www.cve.org/CVERecord?id=CVE-2025-8941
• https://nvd.nist.gov/vuln/detail/CVE-2025-8941

---

linux-pam: Linux-pam directory Traversal

CVE-2025-6020

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-6020
• https://bugzilla.redhat.com/show_bug.cgi?id=2372512
• https://www.cve.org/CVERecord?id=CVE-2025-6020
• https://nvd.nist.gov/vuln/detail/CVE-2025-6020

---

cpython: Cpython infinite loop when parsing a tarfile

CVE-2025-8194

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-8194
• https://bugzilla.redhat.com/show_bug.cgi?id=2384043
• https://www.cve.org/CVERecord?id=CVE-2025-8194
• https://nvd.nist.gov/vuln/detail/CVE-2025-8194
• https://github.com/python/cpython/issues/130577
• https://github.com/python/cpython/pull/137027
• https://mail.python.org/archives/list/[email protected]/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/

---

python-cryptography: NULL-dereference when loading PKCS7 certificates

CVE-2023-49083

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2023-49083
• https://bugzilla.redhat.com/show_bug.cgi?id=2255331
• https://www.cve.org/CVERecord?id=CVE-2023-49083
• https://nvd.nist.gov/vuln/detail/CVE-2023-49083
• https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a
• https://github.com/pyca/cryptography/pull/9926
• https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97

---

cpython: python: Extraction filter bypass for linking outside extraction directory

CVE-2025-4330

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-4330
• https://bugzilla.redhat.com/show_bug.cgi?id=2370014
• https://www.cve.org/CVERecord?id=CVE-2025-4330
• https://nvd.nist.gov/vuln/detail/CVE-2025-4330
• https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f
• https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
• https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
• https://github.com/python/cpython/issues/135034
• https://github.com/python/cpython/pull/135037
• https://mail.python.org/archives/list/[email protected]/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/

---

cpython: python: Bypass extraction filter to modify file metadata outside extraction directory

CVE-2024-12718

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2024-12718
• https://bugzilla.redhat.com/show_bug.cgi?id=2370013
• https://www.cve.org/CVERecord?id=CVE-2024-12718
• https://nvd.nist.gov/vuln/detail/CVE-2024-12718
• https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f
• https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
• https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
• https://github.com/python/cpython/issues/127987
• https://github.com/python/cpython/issues/135034
• https://github.com/python/cpython/pull/135037
• https://mail.python.org/archives/list/[email protected]/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/

---

python: cpython: Arbitrary writes via tarfile realpath overflow

CVE-2025-4517

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-4517
• https://bugzilla.redhat.com/show_bug.cgi?id=2370016
• https://www.cve.org/CVERecord?id=CVE-2025-4517
• https://nvd.nist.gov/vuln/detail/CVE-2025-4517
• https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f
• https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
• https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
• https://github.com/python/cpython/issues/135034
• https://github.com/python/cpython/pull/135037
• https://mail.python.org/archives/list/[email protected]/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/

---

cpython: Tarfile extracts filtered members when errorlevel=0

CVE-2025-4435

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-4435
• https://bugzilla.redhat.com/show_bug.cgi?id=2370010
• https://www.cve.org/CVERecord?id=CVE-2025-4435
• https://nvd.nist.gov/vuln/detail/CVE-2025-4435
• https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
• https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
• https://github.com/python/cpython/issues/135034
• https://github.com/python/cpython/pull/135037
• https://mail.python.org/archives/list/[email protected]/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/

---

cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

CVE-2025-4138

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-4138
• https://bugzilla.redhat.com/show_bug.cgi?id=2372426
• https://www.cve.org/CVERecord?id=CVE-2025-4138
• https://nvd.nist.gov/vuln/detail/CVE-2025-4138
• https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f
• https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
• https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
• https://github.com/python/cpython/issues/135034
• https://github.com/python/cpython/pull/135037
• https://mail.python.org/archives/list/[email protected]/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/

---

python: cpython: URL parser allowed square brackets in domain names

CVE-2025-0938

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-0938
• https://bugzilla.redhat.com/show_bug.cgi?id=2343237
• https://www.cve.org/CVERecord?id=CVE-2025-0938
• https://nvd.nist.gov/vuln/detail/CVE-2025-0938
• https://github.com/python/cpython/issues/105704
• https://github.com/python/cpython/pull/129418

---

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

CVE-2024-47081

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2024-47081
• https://bugzilla.redhat.com/show_bug.cgi?id=2371272
• https://www.cve.org/CVERecord?id=CVE-2024-47081
• https://nvd.nist.gov/vuln/detail/CVE-2024-47081
• http://seclists.org/fulldisclosure/2025/Jun/2
• http://www.openwall.com/lists/oss-security/2025/06/03/11
• http://www.openwall.com/lists/oss-security/2025/06/03/9
• http://www.openwall.com/lists/oss-security/2025/06/04/1
• http://www.openwall.com/lists/oss-security/2025/06/04/6
• https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef
• https://github.com/psf/requests/pull/6965
• https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7
• https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env
• https://seclists.org/fulldisclosure/2025/Jun/2

---

requests: subsequent requests to the same host ignore cert verification

CVE-2024-35195

More information

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2024-35195
• https://bugzilla.redhat.com/show_bug.cgi?id=2282114
• https://www.cve.org/CVERecord?id=CVE-2024-35195
• https://nvd.nist.gov/vuln/detail/CVE-2024-35195
• https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56

---

sqlite: Integer Truncation in SQLite

CVE-2025-6965

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-6965
• https://bugzilla.redhat.com/show_bug.cgi?id=2380149
• https://www.cve.org/CVERecord?id=CVE-2025-6965
• https://nvd.nist.gov/vuln/detail/CVE-2025-6965
• https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8

---

SQLite: integer overflow in SQLite

CVE-2025-3277

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-3277
• https://bugzilla.redhat.com/show_bug.cgi?id=2359553
• https://www.cve.org/CVERecord?id=CVE-2025-3277
• https://nvd.nist.gov/vuln/detail/CVE-2025-3277
• https://sqlite.org/src/info/498e3f1cf57f164f

---

sudo: LPE via host option

CVE-2025-32462

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-32462
• https://bugzilla.redhat.com/show_bug.cgi?id=2374692
• https://www.cve.org/CVERecord?id=CVE-2025-32462
• https://nvd.nist.gov/vuln/detail/CVE-2025-32462
• https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host
• https://www.sudo.ws/security/advisories/host_any/

---

sudo: LPE via chroot option

CVE-2025-32463

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-32463
• https://bugzilla.redhat.com/show_bug.cgi?id=2374693
• https://www.cve.org/CVERecord?id=CVE-2025-32463
• https://nvd.nist.gov/vuln/detail/CVE-2025-32463
• https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot
• https://www.sudo.ws/security/advisories/chroot_bug/

---

Configuration

📅 Schedule: Branch creation - "before 5am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[konflux-internal-p02]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.