go -- multiple vulnerabilities

The Go project reports:

debug/macho fails out when loading a file that contains a dynamic
symbol table command that indicates a larger number of symbols than
exist in the loaded symbol table.

Previously, opening a zip with (*Reader).Open could result in a
panic if the zip contained a file whose name was exclusively made up
of slash characters or “…” path elements. Open could also panic if
passed the empty string directly as an argument.