Go 1.16.7 and Go 1.15.15 are released

[Alex Rakoczy]

Hello gophers,

We have just released Go versions 1.16.7 and 1.15.15, minor point releases.

These minor releases include a security fix according to the new security
policy.

A net/http/httputil ReverseProxy can panic due to a race condition if its
Handler aborts with ErrAbortHandler, for example due to an error in copying the
response body. An attacker might be able to force the conditions leading to the
race condition.

This is issue https://golang.org/issue/46866 and CVE-2021-36221. Thanks to
Andrew Crump (VMware) for reporting this issue.

View the release notes for more information:
https://golang.org/doc/devel/release.html#go1.16.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with
"git checkout go1.16.7" and build as usual.

Thanks to everyone who contributed to the releases.

Cheers,
David, Carlos, and Alex for the Go team