chore(deps): refresh rpm lockfiles [SECURITY]

[red-hat-konflux]

This PR contains the following updates:

File rpms.in.yaml:

Package	Change
coreutils	8.32-41.el9_8 -> 8.32-41.el9_8.1
coreutils-common	8.32-41.el9_8 -> 8.32-41.el9_8.1
vim-filesystem	2:8.2.2637-26.el9_8.13 -> 2:8.2.2637-26.el9_8.21

---

coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values

CVE-2026-56392

More information

Details

A flaw was found in GNU coreutils, specifically in the unexpand utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when unexpand processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing subsequent operations to write beyond its boundaries. Successful exploitation can cause the unexpand utility to crash, potentially resulting in a denial of service or enabling further memory manipulation.

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2026-56392
• https://bugzilla.redhat.com/show_bug.cgi?id=2506694
• https://www.cve.org/CVERecord?id=CVE-2026-56392
• https://nvd.nist.gov/vuln/detail/CVE-2026-56392
• https://cert.pl/en/posts/2026/07/CVE-2026-56391
• https://git.savannah.gnu.org/cgit/coreutils.git/
• https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[rhacs-bot]

Auto-approved by automation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Advanced

Run ID: 1120653e-dfb9-4885-a2d1-aa0820390258

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 33.40%. Comparing base (ca8d926) to head (cb3a6d7).

Additional details and impacted files

@@             Coverage Diff              @@
##           release-0.4    #1741   +/-   ##
============================================
  Coverage        33.40%   33.40%           
============================================
  Files               22       22           
  Lines             3628     3628           
  Branches          3628     3628           
============================================
  Hits              1212     1212           
  Misses            2407     2407           
  Partials             9        9           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.