GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Refresh RPM lockfiles [SECURITY] by red-hat-konflux[bot] · Pull Request #24028 · stackrox/stackrox

Conversation

red-hat-konflux Bot commented Nov 12, 2026

Copy link

Copy Markdown

Contributor

This PR contains the following updates:

File rpms.in.yaml:

Package	Change
libgcc	`8.5.0-30.el8_10` -> `8.5.0-31.el8_10`
libgomp	`8.5.0-30.el8_10` -> `8.5.0-31.el8_10`
libstdc++	`8.5.0-30.el8_10` -> `8.5.0-31.el8_10`

gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std

CVE-2026-114690

More information

Details

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compiled with parallel mode, causing the process to crash and leading to a Denial of Service (DoS).

Severity

Moderate

References

gcc: Integer wrap in `std

CVE-2026-114691

More information

Details

A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations.

Severity

Moderate

References

🔧 This Pull Request updates lock files to use the latest dependency versions.

Configuration

📅 Schedule: (in timezone Etc/UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Refresh RPM lockfiles [SECURITY]

fc4f9a5

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot requested review from a team and rhacs-bot as code owners

November 12, 2026 06:27

red-hat-konflux Bot added the mintmaker-auto-merge Automatically approve and merge PRs from MintMaker via the corresponding workflow. label

Nov 12, 2026

red-hat-konflux Bot requested a review from a team as a code owner

November 12, 2026 06:27

github-actions Bot added the backport PR to backport changes from master to release branch label

Nov 12, 2026

rhacs-bot commented Nov 12, 2026

Copy link

Copy Markdown

Contributor

Images are ready for the commit at fc4f9a5.

To use with deploy scripts, first export MAIN_IMAGE_TAG=4.10.12-rc.0-8-gfc4f9a5388.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

codecov Bot commented Nov 12, 2026

Copy link

Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 49.51%. Comparing base (631c214) to head (fc4f9a5).

Additional details and impacted files

@@               Coverage Diff                @@
##           release-4.10   #24028      +/-   ##
================================================
- Coverage         49.51%   49.51%   -0.01%     
================================================
  Files              2663     2663              
  Lines            201394   201394              
================================================
- Hits              99725    99721       -4     
- Misses            94212    94216       +4     
  Partials           7457     7457

Flag	Coverage Δ
go-unit-tests	`49.51% <ø> (-0.01%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

openshift-ci Bot commented Nov 12, 2026

Copy link

Copy Markdown

@red-hat-konflux[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/gke-qa-e2e-tests	`fc4f9a5`	link	false	`/test gke-qa-e2e-tests`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

github-actions Bot commented Nov 12, 2026

Copy link

Copy Markdown

Contributor

/konflux-retest operator-bundle-on-push

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

2 similar comments

github-actions Bot commented Nov 12, 2026

Copy link

Copy Markdown

Contributor

/konflux-retest operator-bundle-on-push

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

github-actions Bot commented Nov 12, 2026

Copy link

Copy Markdown

Contributor

/konflux-retest operator-bundle-on-push

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

github-actions Bot commented Nov 12, 2026

Copy link

Copy Markdown

Contributor

/konflux-retest create-custom-snapshot

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

2 similar comments

github-actions Bot commented Nov 12, 2026

Copy link

Copy Markdown

Contributor

/konflux-retest create-custom-snapshot

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

github-actions Bot commented Nov 12, 2026

Copy link

Copy Markdown

Contributor

/konflux-retest create-custom-snapshot

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

This branch has not been deployed

No deployments

Reviewers

rhacs-bot

Awaiting requested review from rhacs-bot

rhacs-bot is a code owner

At least 1 approving review is required to merge this pull request.

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

backport

PR to backport changes from master to release branch

mintmaker-auto-merge

Automatically approve and merge PRs from MintMaker via the corresponding workflow.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

1 participant

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.