chore(deps): refresh rpm lockfiles [SECURITY]

[red-hat-konflux]

This PR contains the following updates:

File rpms.in.yaml:

Package	Change
openssh	8.0p1-26.el8_10 -> 8.0p1-27.el8_10
openssh-clients	8.0p1-26.el8_10 -> 8.0p1-27.el8_10
openssl	1:1.1.1k-14.el8_6 -> 1:1.1.1k-14.el8_10

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand

CVE-2025-61984

More information

Details

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-61984
• https://bugzilla.redhat.com/show_bug.cgi?id=2401960
• https://www.cve.org/CVERecord?id=CVE-2025-61984
• https://nvd.nist.gov/vuln/detail/CVE-2025-61984
• https://marc.info/?l=openssh-unix-dev&m=175974522032149&w=2
• https://www.openssh.com/releasenotes.html#10.1p1
• https://www.openwall.com/lists/oss-security/2025/10/06/1

---

openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand

CVE-2025-61985

More information

Details

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

Severity

Moderate

References

• https://access.redhat.com/security/cve/CVE-2025-61985
• https://bugzilla.redhat.com/show_bug.cgi?id=2401962
• https://www.cve.org/CVERecord?id=CVE-2025-61985
• https://nvd.nist.gov/vuln/detail/CVE-2025-61985
• https://marc.info/?l=openssh-unix-dev&m=175974522032149&w=2
• https://www.openssh.com/releasenotes.html#10.1p1
• https://www.openwall.com/lists/oss-security/2025/10/06/1

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.