chore(deps): refresh rpm lockfiles [SECURITY]

[red-hat-konflux]

This PR contains the following updates:

File rpms.in.yaml:

Package	Change
sqlite-libs	3.34.1-10.el9_8 -> 3.34.1-11.el9_8

---

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

CVE-2026-11822

More information

Details

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed against such a database, an attacker can cause process crashes, memory exhaustion, or achieve arbitrary code execution, potentially compromising the system.

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2026-11822
• https://bugzilla.redhat.com/show_bug.cgi?id=2487258
• https://www.cve.org/CVERecord?id=CVE-2026-11822
• https://nvd.nist.gov/vuln/detail/CVE-2026-11822
• https://sqlite.org/releaselog/3_53_2.html
• https://sqlite.org/src/info/061febcf41ca
• https://sqlite.org/src/info/4a5ad516ea93
• https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension

---

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

CVE-2026-11824

More information

Details

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processing. Successful exploitation of this vulnerability can lead to a crash of the application or allow for arbitrary code execution.

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2026-11824
• https://bugzilla.redhat.com/show_bug.cgi?id=2487269
• https://www.cve.org/CVERecord?id=CVE-2026-11824
• https://nvd.nist.gov/vuln/detail/CVE-2026-11824
• https://sqlite.org/releaselog/3_53_2.html
• https://sqlite.org/src/info/061febcf41ca
• https://sqlite.org/src/info/4a5ad516ea93
• https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[rhacs-bot]

Auto-approved by automation.

[rhacs-bot]

Auto-approved by automation.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 33.96%. Comparing base (7694322) to head (b78134f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1578   +/-   ##
=======================================
  Coverage   33.96%   33.96%           
=======================================
  Files          22       22           
  Lines        3421     3421           
  Branches     3421     3421           
=======================================
  Hits         1162     1162           
  Misses       2254     2254           
  Partials        5        5           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.