golang: Update to 1.16.5 15824/head
authorJeffery To <jeffery.to@gmail.com>
Fri, 11 Jun 2021 08:26:56 +0000 (16:26 +0800)
committerJeffery To <jeffery.to@gmail.com>
Fri, 11 Jun 2021 08:58:05 +0000 (16:58 +0800)
commit7f2db681f13900863781798bd2a77bbe6c674519
tree1122293ee6846999e92f789e7ed4fb2cdf41d984
parent5342be81989606d57e9dd9661461acc3345890f4
golang: Update to 1.16.5

1.16.1 included fixes for:

* CVE-2021-27918 - encoding/xml: infinite loop when using
  xml.NewTokenDecoder with a custom TokenReader
* CVE-2021-27919 - archive/zip: can panic when calling Reader.Open

1.16.4 included fixes for:

* CVE-2021-31525 - net/http: ReadRequest can stack overflow due to
  recursion with very large headers

1.16.5 includes fixes for:

* CVE-2021-33195 - net: Lookup functions may return invalid host names
* CVE-2021-33196 - archive/zip: malformed archive may cause panic or
  memory exhaustion
* CVE-2021-33197 - net/http/httputil: ReverseProxy forwards Connection
  headers if first one is empty

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fe3c49fe07dfcdd3794c588af916ba6a2c03db28)
lang/golang/golang/Makefile