From e86464c0be61fb1652bd0ce3227a062ece02f823 Mon Sep 17 00:00:00 2001
From: Sofiya Nuryyeva <sonuryye@redhat.com>
Date: Thu, 29 Oct 2026 11:52:19 -0400
Subject: [PATCH] LCORE-5106: fix CVEs and regenerate rpm lock

---
 .konflux/build-args-konflux.conf |  4 ++--
 .konflux/rpms.in.yaml            |  3 +--
 .konflux/rpms.lock.yaml          | 38 ++++++++++----------------------
 3 files changed, 15 insertions(+), 30 deletions(-)

diff --git a/.konflux/build-args-konflux.conf b/.konflux/build-args-konflux.conf
index 7d2b9202c..7c10c63bf 100644
--- a/.konflux/build-args-konflux.conf
+++ b/.konflux/build-args-konflux.conf
@@ -1,4 +1,4 @@
-BUILDER_BASE_IMAGE=quay.io/aipcc/base-images/cpu:3.5.2-1790703656
+BUILDER_BASE_IMAGE=quay.io/aipcc/base-images/cpu:3.5.5-1793042162
 BUILDER_DNF_COMMAND=dnf
-RUNTIME_BASE_IMAGE=quay.io/aipcc/base-images/cpu:3.5.2-1790703656
+RUNTIME_BASE_IMAGE=quay.io/aipcc/base-images/cpu:3.5.5-1793042162
 RUNTIME_DNF_COMMAND=dnf
diff --git a/.konflux/rpms.in.yaml b/.konflux/rpms.in.yaml
index b841aa2a8..d5d6216cf 100644
--- a/.konflux/rpms.in.yaml
+++ b/.konflux/rpms.in.yaml
@@ -9,8 +9,7 @@ packages:
   ]
 upgradePackages:
   [
-    python3,
-    python3-libs,
+    libbrotli,
   ]
 contentOrigin:
   repofiles: ["./redhat.repo"]
diff --git a/.konflux/rpms.lock.yaml b/.konflux/rpms.lock.yaml
index 98deeff70..db012052c 100644
--- a/.konflux/rpms.lock.yaml
+++ b/.konflux/rpms.lock.yaml
@@ -74,20 +74,13 @@ arches:
     name: info
     evr: 6.7-15.el9
     sourcerpm: texinfo-6.7-15.el9.src.rpm
-  - url: https://cdn.redhat.com/content/eus/rhel9/9.6/aarch64/baseos/os/Packages/p/python3-3.9.21-2.el9_6.7.aarch64.rpm
+  - url: https://cdn.redhat.com/content/eus/rhel9/9.6/aarch64/baseos/os/Packages/l/libbrotli-1.0.9-7.el9_6.3.aarch64.rpm
     repoid: rhel-9-for-aarch64-baseos-eus-rpms__9_DOT_6
-    size: 25259
-    checksum: sha256:8da6c570a5e33d89dd40077fbd85bf0c719fbfa9db07f0a22c3fec82429921f8
-    name: python3
-    evr: 3.9.21-2.el9_6.7
-    sourcerpm: python3.9-3.9.21-2.el9_6.7.src.rpm
-  - url: https://cdn.redhat.com/content/eus/rhel9/9.6/aarch64/baseos/os/Packages/p/python3-libs-3.9.21-2.el9_6.7.aarch64.rpm
-    repoid: rhel-9-for-aarch64-baseos-eus-rpms__9_DOT_6
-    size: 8462381
-    checksum: sha256:57c86796858fff48efec988106d85c7b3e3ec63336f20d1d666e9756dfa988c0
-    name: python3-libs
-    evr: 3.9.21-2.el9_6.7
-    sourcerpm: python3.9-3.9.21-2.el9_6.7.src.rpm
+    size: 318370
+    checksum: sha256:68cb44e3220b902b0bb8d3f65923f16ec5f8377617300bd627f0859bc3a92b0e
+    name: libbrotli
+    evr: 1.0.9-7.el9_6.3
+    sourcerpm: brotli-1.0.9-7.el9_6.3.src.rpm
   source: []
   module_metadata: []
 - arch: x86_64
@@ -162,19 +155,12 @@ arches:
     name: info
     evr: 6.7-15.el9
     sourcerpm: texinfo-6.7-15.el9.src.rpm
-  - url: https://cdn.redhat.com/content/eus/rhel9/9.6/x86_64/baseos/os/Packages/p/python3-3.9.21-2.el9_6.7.x86_64.rpm
-    repoid: rhel-9-for-x86_64-baseos-eus-rpms__9_DOT_6
-    size: 25312
-    checksum: sha256:cc08460dae8a0833113110e2a8a38d2ede7c61142e580de8c0b697a3b0a5607a
-    name: python3
-    evr: 3.9.21-2.el9_6.7
-    sourcerpm: python3.9-3.9.21-2.el9_6.7.src.rpm
-  - url: https://cdn.redhat.com/content/eus/rhel9/9.6/x86_64/baseos/os/Packages/p/python3-libs-3.9.21-2.el9_6.7.x86_64.rpm
+  - url: https://cdn.redhat.com/content/eus/rhel9/9.6/x86_64/baseos/os/Packages/l/libbrotli-1.0.9-7.el9_6.3.x86_64.rpm
     repoid: rhel-9-for-x86_64-baseos-eus-rpms__9_DOT_6
-    size: 8473456
-    checksum: sha256:0dd8473784ef930055b72de89db1d7d484134a02157ee46dbb9cfed42f0f5835
-    name: python3-libs
-    evr: 3.9.21-2.el9_6.7
-    sourcerpm: python3.9-3.9.21-2.el9_6.7.src.rpm
+    size: 318958
+    checksum: sha256:837bdec329061bc5d0000c2bb1fd383e31ae1cf68e4b646ca78fe1522e24efe7
+    name: libbrotli
+    evr: 1.0.9-7.el9_6.3
+    sourcerpm: brotli-1.0.9-7.el9_6.3.src.rpm
   source: []
   module_metadata: []