Bump repositories for CVE-2026-31431 (Copy Fail) (#2299)

This includes Rocky Linux kernels fixing the Copy Fail vulnerability.
Mitigation on Ubuntu is applied through an updated kmod package [1].

[1] https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available

Author: priteau

etc/kayobe/pulp-repo-versions.yml

@@ -2,18 +2,18 @@
 # This file is autogenerated by Ansible using the following workflow:
 # https://github.com/stackhpc/stackhpc-release-train/actions/workflows/package-update-kayobe.yml
 stackhpc_pulp_repo_almalinux_9_proxysql_2_7_version: 20250627T134211
-stackhpc_pulp_repo_centos_stream_10_docker_aarch64_version: 20260402T222316
-stackhpc_pulp_repo_centos_stream_10_docker_version: 20260402T202840
-stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_aarch64_version: 20260320T220155
-stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_version: 20260324T212957
+stackhpc_pulp_repo_centos_stream_10_docker_aarch64_version: 20260506T232721
+stackhpc_pulp_repo_centos_stream_10_docker_version: 20260506T205129
+stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_aarch64_version: 20260421T225912
+stackhpc_pulp_repo_centos_stream_10_nfv_openvswitch_version: 20260421T222634
 stackhpc_pulp_repo_centos_stream_10_openstack_epoxy_aarch64_version: 20260227T222400
 stackhpc_pulp_repo_centos_stream_10_openstack_epoxy_version: 20260227T214730
 stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_aarch64_version: 20260220T152827
 stackhpc_pulp_repo_centos_stream_10_storage_ceph_squid_version: 20260220T152827
-stackhpc_pulp_repo_centos_stream_9_docker_aarch64_version: 20260402T214631
-stackhpc_pulp_repo_centos_stream_9_docker_version: 20260402T202840
-stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_aarch64_version: 20260319T213811
-stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_version: 20260319T212811
+stackhpc_pulp_repo_centos_stream_9_docker_aarch64_version: 20260506T224443
+stackhpc_pulp_repo_centos_stream_9_docker_version: 20260506T205129
+stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_aarch64_version: 20260421T223857
+stackhpc_pulp_repo_centos_stream_9_nfv_openvswitch_version: 20260421T222634
 stackhpc_pulp_repo_centos_stream_9_openstack_epoxy_aarch64_version: 20250521T015033
 stackhpc_pulp_repo_centos_stream_9_openstack_epoxy_version: 20250521T021940
 stackhpc_pulp_repo_centos_stream_9_opstools_aarch64_version: 20240927T073838
@@ -32,45 +32,45 @@ stackhpc_pulp_repo_doca_3_2_2_rhel9_7_modules_aarch64_version: 20260424T151043
 stackhpc_pulp_repo_doca_3_2_2_rhel9_7_modules_version: 20260424T151043
 stackhpc_pulp_repo_doca_3_2_2_rhel9_aarch64_version: 20260326T091359
 stackhpc_pulp_repo_doca_3_2_2_rhel9_version: 20260326T091359
-stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20260402T202840
+stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20260506T205129
 stackhpc_pulp_repo_elrepo_10_aarch64_version: 20260220T152827
-stackhpc_pulp_repo_elrepo_10_version: 20260318T213508
+stackhpc_pulp_repo_elrepo_10_version: 20260426T213637
 stackhpc_pulp_repo_elrepo_9_aarch64_version: 20250408T030629
-stackhpc_pulp_repo_elrepo_9_version: 20260320T212619
-stackhpc_pulp_repo_epel_10_aarch64_version: 20260402T222316
-stackhpc_pulp_repo_epel_10_version: 20260402T213352
-stackhpc_pulp_repo_epel_9_aarch64_version: 20260402T214631
-stackhpc_pulp_repo_epel_9_version: 20260402T213352
-stackhpc_pulp_repo_grafana_version: 20260402T203343
+stackhpc_pulp_repo_elrepo_9_version: 20260426T203635
+stackhpc_pulp_repo_epel_10_aarch64_version: 20260505T223913
+stackhpc_pulp_repo_epel_10_version: 20260506T215737
+stackhpc_pulp_repo_epel_9_aarch64_version: 20260506T224443
+stackhpc_pulp_repo_epel_9_version: 20260506T215737
+stackhpc_pulp_repo_grafana_version: 20260506T205914
 stackhpc_pulp_repo_opensearch_2_x_version: 20260312T214445
 stackhpc_pulp_repo_opensearch_dashboards_2_x_version: 20260312T214445
 stackhpc_pulp_repo_rhel9_rabbitmq_erlang_26_aarch64_version: 20260112T224827
 stackhpc_pulp_repo_rhel9_rabbitmq_erlang_27_aarch64_version: 20260112T224827
-stackhpc_pulp_repo_rhel9_rabbitmq_erlang_version: 20260317T203047
-stackhpc_pulp_repo_rhel9_rabbitmq_server_version: 20260220T202834
+stackhpc_pulp_repo_rhel9_rabbitmq_erlang_version: 20260423T205618
+stackhpc_pulp_repo_rhel9_rabbitmq_server_version: 20260423T205618
 stackhpc_pulp_repo_rhel_10_mariadb_10_11_aarch64_version: 20260220T152827
 stackhpc_pulp_repo_rhel_10_mariadb_10_11_version: 20260220T152827
 stackhpc_pulp_repo_rhel_9_influxdb_aarch64_version: 20260112T224827
-stackhpc_pulp_repo_rhel_9_influxdb_version: 20260402T204013
+stackhpc_pulp_repo_rhel_9_influxdb_version: 20260506T205410
 stackhpc_pulp_repo_rhel_9_mariadb_10_11_aarch64_version: 20260204T223146
 stackhpc_pulp_repo_rhel_9_mariadb_10_11_version: 20260204T213517
 stackhpc_pulp_repo_rhel_9_treasuredata_5_aarch64_version: 20251219T213344
 stackhpc_pulp_repo_rhel_9_treasuredata_5_version: 20251219T202129
-stackhpc_pulp_repo_rocky_10_1_appstream_aarch64_version: 20260331T000211
-stackhpc_pulp_repo_rocky_10_1_appstream_source_version: 20260331T220248
-stackhpc_pulp_repo_rocky_10_1_appstream_version: 20260331T215909
-stackhpc_pulp_repo_rocky_10_1_baseos_aarch64_version: 20260331T222629
-stackhpc_pulp_repo_rocky_10_1_baseos_source_version: 20260331T220248
-stackhpc_pulp_repo_rocky_10_1_baseos_version: 20260331T221540
-stackhpc_pulp_repo_rocky_10_1_crb_aarch64_version: 20260331T222629
-stackhpc_pulp_repo_rocky_10_1_crb_source_version: 20260311T223420
-stackhpc_pulp_repo_rocky_10_1_crb_version: 20260331T215909
+stackhpc_pulp_repo_rocky_10_1_appstream_aarch64_version: 20260506T232721
+stackhpc_pulp_repo_rocky_10_1_appstream_source_version: 20260506T230406
+stackhpc_pulp_repo_rocky_10_1_appstream_version: 20260506T223941
+stackhpc_pulp_repo_rocky_10_1_baseos_aarch64_version: 20260506T232721
+stackhpc_pulp_repo_rocky_10_1_baseos_source_version: 20260506T230406
+stackhpc_pulp_repo_rocky_10_1_baseos_version: 20260506T231232
+stackhpc_pulp_repo_rocky_10_1_crb_aarch64_version: 20260506T232721
+stackhpc_pulp_repo_rocky_10_1_crb_source_version: 20260428T223954
+stackhpc_pulp_repo_rocky_10_1_crb_version: 20260506T223941
 stackhpc_pulp_repo_rocky_10_1_extras_aarch64_version: 20260227T002947
-stackhpc_pulp_repo_rocky_10_1_extras_source_version: 20260331T220248
+stackhpc_pulp_repo_rocky_10_1_extras_source_version: 20260413T163104
 stackhpc_pulp_repo_rocky_10_1_extras_version: 20260226T235218
-stackhpc_pulp_repo_rocky_10_1_highavailability_aarch64_version: 20260227T002947
-stackhpc_pulp_repo_rocky_10_1_highavailability_source_version: 20260220T120402
-stackhpc_pulp_repo_rocky_10_1_highavailability_version: 20260226T235218
+stackhpc_pulp_repo_rocky_10_1_highavailability_aarch64_version: 20260506T232721
+stackhpc_pulp_repo_rocky_10_1_highavailability_source_version: 20260428T223954
+stackhpc_pulp_repo_rocky_10_1_highavailability_version: 20260506T223941
 stackhpc_pulp_repo_rocky_9_1_appstream_version: 20231207T013715
 stackhpc_pulp_repo_rocky_9_1_baseos_version: 20231206T014015
 stackhpc_pulp_repo_rocky_9_1_crb_version: 20231211T120328
@@ -111,24 +111,24 @@ stackhpc_pulp_repo_rocky_9_6_extras_aarch64_version: 20250726T045704
 stackhpc_pulp_repo_rocky_9_6_extras_version: 20250726T040613
 stackhpc_pulp_repo_rocky_9_6_highavailability_aarch64_version: 20250605T150141
 stackhpc_pulp_repo_rocky_9_6_highavailability_version: 20250605T150141
-stackhpc_pulp_repo_rocky_9_7_appstream_aarch64_version: 20260327T214451
-stackhpc_pulp_repo_rocky_9_7_appstream_source_version: 20260327T211919
-stackhpc_pulp_repo_rocky_9_7_appstream_version: 20260328T205749
-stackhpc_pulp_repo_rocky_9_7_baseos_aarch64_version: 20260328T214153
-stackhpc_pulp_repo_rocky_9_7_baseos_source_version: 20260327T211919
-stackhpc_pulp_repo_rocky_9_7_baseos_version: 20260327T215135
-stackhpc_pulp_repo_rocky_9_7_crb_aarch64_version: 20260327T214451
-stackhpc_pulp_repo_rocky_9_7_crb_source_version: 20260208T212722
-stackhpc_pulp_repo_rocky_9_7_crb_version: 20260328T205749
+stackhpc_pulp_repo_rocky_9_7_appstream_aarch64_version: 20260503T222614
+stackhpc_pulp_repo_rocky_9_7_appstream_source_version: 20260506T220234
+stackhpc_pulp_repo_rocky_9_7_appstream_version: 20260506T215314
+stackhpc_pulp_repo_rocky_9_7_baseos_aarch64_version: 20260506T224443
+stackhpc_pulp_repo_rocky_9_7_baseos_source_version: 20260503T221514
+stackhpc_pulp_repo_rocky_9_7_baseos_version: 20260506T222838
+stackhpc_pulp_repo_rocky_9_7_crb_aarch64_version: 20260506T224443
+stackhpc_pulp_repo_rocky_9_7_crb_source_version: 20260428T214810
+stackhpc_pulp_repo_rocky_9_7_crb_version: 20260506T215314
 stackhpc_pulp_repo_rocky_9_7_extras_aarch64_version: 20260226T234714
 stackhpc_pulp_repo_rocky_9_7_extras_source_version: 20260226T232039
 stackhpc_pulp_repo_rocky_9_7_extras_version: 20260226T231043
-stackhpc_pulp_repo_rocky_9_7_highavailability_aarch64_version: 20260311T220038
-stackhpc_pulp_repo_rocky_9_7_highavailability_source_version: 20260311T214515
-stackhpc_pulp_repo_rocky_9_7_highavailability_version: 20260311T212129
+stackhpc_pulp_repo_rocky_9_7_highavailability_aarch64_version: 20260506T224443
+stackhpc_pulp_repo_rocky_9_7_highavailability_source_version: 20260429T221435
+stackhpc_pulp_repo_rocky_9_7_highavailability_version: 20260506T215314
 stackhpc_pulp_repo_rocky_9_sig_security_common_aarch64_version: 20260305T225932
 stackhpc_pulp_repo_rocky_9_sig_security_common_source_version: 20260305T224636
 stackhpc_pulp_repo_rocky_9_sig_security_common_version: 20260305T222525
-stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260402T223242
-stackhpc_pulp_repo_ubuntu_noble_security_version: 20260403T011503
-stackhpc_pulp_repo_ubuntu_noble_version: 20260403T011503
+stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260506T232713
+stackhpc_pulp_repo_ubuntu_noble_security_version: 20260507T015832
+stackhpc_pulp_repo_ubuntu_noble_version: 20260507T015832

releasenotes/notes/cve-2026-31431-664ded192b9acf52.yaml

@@ -0,0 +1,4 @@
+---
+security:
+  - |
+    Bumps repository versions to includes fixes for CVE-2026-31431 (Copy Fail).