- rebuild with golang 1.25.7-1.el9_6.tuxcare.els16 to fix Go standard library CVEs - CVE-2026-33818: enforce a maximum recursion depth in encoding/asn1 Unmarshal to prevent stack exhaustion when parsing deeply-nested recursive structures - CVE-2026-56860: avoid quadratic complexity in net/url resolvePath by resolving '..' segments with index-based backtracking on a byte buffer - CVE-2026-56862: do not count handshake messages as state-advancing after the handshake has completed in crypto/tls, bounding the key derivation work a client can force with repeated KeyUpdate messages