- rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els16 to fix the following CVE's - CVE-2026-33818: enforce a maximum recursion depth in encoding/asn1 Unmarshal to prevent stack exhaustion when parsing deeply-nested recursive structures - CVE-2026-56858: fix JavaScript regexp context tracking in html/template so pathological input can no longer close an unescaped '/' early and inject attacker-controlled content - CVE-2026-56860: avoid quadratic complexity in net/url resolvePath when resolving '..' segments, preventing denial-of-service - CVE-2026-56862: bound the key-derivation work a client can force in crypto/tls by not counting post-handshake KeyUpdate messages as state-advancing