chore(deps): refresh rpm lockfiles [SECURITY]

[red-hat-konflux]

This PR contains the following updates:

File rpms.in.yaml:

Package	Change
libarchive	3.5.3-9.el9_7 -> 3.5.3-11.el9_8

---

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

CVE-2026-14164

More information

Details

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2026-14164
• https://bugzilla.redhat.com/show_bug.cgi?id=2493411
• https://www.cve.org/CVERecord?id=CVE-2026-14164
• https://nvd.nist.gov/vuln/detail/CVE-2026-14164
• https://github.com/libarchive/libarchive/issues/3069
• https://github.com/libarchive/libarchive/pull/3071

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[rhacs-bot]

Auto-approved by automation.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 27.34%. Comparing base (00ba570) to head (6c6b009).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@              Coverage Diff              @@
##           release-3.25    #3752   +/-   ##
=============================================
  Coverage         27.34%   27.34%           
=============================================
  Files                95       95           
  Lines              5420     5420           
  Branches           2545     2545           
=============================================
  Hits               1482     1482           
  Misses             3211     3211           
  Partials            727      727           

Flag	Coverage Δ
collector-unit-tests	27.34% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.