golang-1.11 (1.11.6-1+deb10u4) buster-security; urgency=high

golang-1.11 (1.11.6-1+deb10u4) buster-security; urgency=high

  * Team upload.

  [ Dr. Tobias Quathamer ]
  * cryptobyte: fix panic due to malformed ASN.1 inputs on 32-bit archs
    https://github.com/golang/go/issues/36837
    CVE-2020-7919
  * net/http: Expect 100-continue panics in httputil.ReverseProxy
    https://github.com/golang/go/issues/34902
    CVE-2020-15586
  * encoding/binary: ReadUvarint and ReadVarint can read an unlimited
    number of bytes from invalid inputs
    https://github.com/golang/go/issues/40618
    CVE-2020-16845

  [ Shengjing Zhu ]
  * crypto/elliptic: incorrect operations on the P-224 curve
    https://github.com/golang/go/issues/43786
    CVE-2021-3114

[dgit import unpatched golang-1.11 1.11.6-1+deb10u4]