- Rebuild with golang 1.25.7-1.el9_6.tuxcare.els16 to fix the following CVEs - CVE-2026-33818: enforce a maximum recursion depth in encoding/asn1 Unmarshal to prevent stack exhaustion on deeply nested structures - CVE-2026-56859: add a recursion depth guard in encoding/xml so that DecodeElement no longer resets the depth counter - CVE-2026-56858: track the JavaScript regexp context in html/template so a pathological input cannot close an unescaped '/' early - CVE-2026-56860: avoid quadratic complexity in net/url resolvePath by resolving ".." segments with index-based backtracking - CVE-2026-56862: do not count handshake messages as state-advancing after the crypto/tls handshake has completed, bounding KeyUpdate key derivation