base:packages: don't pin openssl version.
base:packages: nmap-ncat for rhel7.