golang-1.7 (1.7.4-2+deb9u2) stretch-security; urgency=high

golang-1.7 (1.7.4-2+deb9u2) stretch-security; urgency=high

  * Non-maintainer upload by the LTS Team.
  * CVE-2020-15586
    Using the 100-continue in HTTP headers received by a net/http/Server
    can lead to a data race involving the connection's buffered writer.
  * CVE-2020-16845
    Certain invalid inputs to ReadUvarint or ReadVarint could cause those
    functions to read an unlimited number of bytes from the ByteReader
    argument before returning an error.

[dgit import unpatched golang-1.7 1.7.4-2+deb9u2]