- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els26 to fix the following Go standard-library CVE's tracked for this package - CVE-2026-33818: fix encoding/asn1 stack exhaustion by enforcing a recursion depth limit in Unmarshal when parsing deeply nested structures - CVE-2026-56858: fix html/template XSS where pathological input could close an unescaped '/' early and inject attacker-controlled content - CVE-2026-56860: fix net/url quadratic complexity when resolving relative paths containing many '..' parent-directory segments - CVE-2026-56862: fix crypto/tls denial of service from post-handshake KeyUpdate messages forcing unbounded key-derivation work - the same golang rebuild also carries CVE-2026-56859 (encoding/xml unmarshal depth-limit bypass via a custom UnmarshalXML), which is not tracked by these tickets