[ALAS2-2021-1694] Amazon Linux 2 2017.12 - ALAS2-2021-1694: medium priority package update for golang

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities:
CVE-2021-34558:
A flaw was found in golang. A panic can be triggered by an attacker in a privileged network position without access to the server certificate's private key, as long as a trusted ECDSA or Ed25519 certificate for the server exists (or can be issued), or the client is configured with Config.InsecureSkipVerify. Clients that disable all TLS_RSA cipher suites (that is, TLS 1.0-1.2 cipher suites without ECDHE), as well as TLS 1.3-only clients, are unaffected.
1983596: CVE-2021-34558 golang: crypto/tls: certificate of wrong type is causing TLS client to panic

CVE-2021-33196:
A vulnerability was found in archive/zip of the Go standard library. Applications written in Go can panic or potentially exhaust system memory when parsing malformed ZIP files.
1965503: CVE-2021-33196 golang: archive/zip: Malformed archive may cause panic or memory exhaustion