CVE:CVE-2019-9741
CNNVD:CNNVD-201903-487
Google Go是美国谷歌（Google）公司的一款静态强类型、编译型、并发型，并具有垃圾回收功能的编程语言。
Google Go 1.11.5版本中的net/http存在CRLF注入漏洞。远程攻击者可利用该漏洞操纵HTTP报头并攻击内部主机。
solution:Upgrade golang go to a higher version than 1.11.5,and avoid the version 1.11.5; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 29,and avoid the version 29; Upgrade redhat developer_tools to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0