Description

This PR updates the ubi8 minimal image to mitigate security vulnerabilities in included packages.

1. libssh 0.9.6-14.el8: A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.
2. gnutls 3.6.16-8.el8_10.3: A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
3. libssh-config 0.9.6-14.el8: A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.

Key Changes

• Update the ubi8 minimal version

Testing and Verification

N/A

Related Issues

• https://splunk.atlassian.net/browse/VULN-38980
• https://splunk.atlassian.net/browse/VULN-39654
• https://splunk.atlassian.net/browse/VULN-38981

PR Checklist

• Code changes adhere to the project's coding standards.
• Relevant unit and integration tests are included.
• Documentation has been updated accordingly.
• All tests pass locally.
• The PR description follows the project's guidelines.