Red Hat Security Advisory: git-lfs security and bug fix update

CVE-2020-28851 — golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension CVE-2020-28852 — golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-27664 — golang: net/http: handle server errors after sending GOAWAY CVE-2022-30630 — golang: io/fs: stack exhaustion in Glob CVE-2022-30632 — golang: path/filepath: stack exhaustion in Glob CVE-2022-30635 — golang: encoding/gob: stack exhaustion in Decoder.Decode CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working CVE-2022-32189 — golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service