Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation (CVE-2026-35172) | HOL Guard CVE