This includes additional fixes for CVE-2021-39293. go1.16.8 (released 2021-09-09) includes a security fix to the archive/zip package, as well as bug fixes to the archive/zip, go/internal/gccgoimporter, html/template, net/http, and runtime/pprof packages. See the Go 1.16.8 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.8+label%3ACherryPickApproved Signed-off-by: Sebastiaan van Stijn <github@gone.nl>