chore(deps): refresh rpm lockfiles [SECURITY]

[red-hat-konflux]

This PR contains the following updates:

File rpms.in.yaml:

Package	Change
openssh	8.0p1-27.el8_10 -> 8.0p1-28.el8_10
openssh-clients	8.0p1-27.el8_10 -> 8.0p1-28.el8_10
platform-python	3.6.8-74.el8_10 -> 3.6.8-75.el8_10
python3-libs	3.6.8-74.el8_10 -> 3.6.8-75.el8_10

---

openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables

CVE-2026-3497

More information

Details

A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the sshpkt_disconnect() function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2026-3497
• https://bugzilla.redhat.com/show_bug.cgi?id=2447085
• https://www.cve.org/CVERecord?id=CVE-2026-3497
• https://nvd.nist.gov/vuln/detail/CVE-2026-3497
• https://ubuntu.com/security/CVE-2026-3497
• https://www.openwall.com/lists/oss-security/2026/03/12/3

---

python: Python: Command-line option injection in webbrowser.open() via crafted URLs

CVE-2026-4519

More information

Details

A flaw was found in Python. The webbrowser.open() API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2026-4519
• https://bugzilla.redhat.com/show_bug.cgi?id=2449649
• https://www.cve.org/CVERecord?id=CVE-2026-4519
• https://nvd.nist.gov/vuln/detail/CVE-2026-4519
• https://github.com/python/cpython/issues/143930
• https://github.com/python/cpython/pull/143931
• https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: Branch creation - "" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[rhacs-bot]

Auto-approved by automation.

[rhacs-bot]

Auto-approved by automation.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 27.61%. Comparing base (d02427a) to head (573d17f).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@              Coverage Diff              @@
##           release-3.22    #3186   +/-   ##
=============================================
  Coverage         27.61%   27.61%           
=============================================
  Files                96       96           
  Lines              5424     5424           
  Branches           2523     2523           
=============================================
  Hits               1498     1498           
  Misses             3214     3214           
  Partials            712      712           

Flag	Coverage Δ
collector-unit-tests	27.61% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.