CVE:CVE-2018-16874
CNNVD:CNNVD-201812-692
Google Go是美国谷歌（Google）公司的一种针对多处理器系统应用程序的编程进行了优化的编程语言。
Google Go 1.10.6之前版本和1.11.3之前的1.11.x版本中（GOPATH模式）的‘go get’命令存在目录遍历漏洞。攻击者可利用该漏洞进行任意的文件系统写入操作，进而执行代码。
solution:Upgrade golang go to a higher version than 1.10.6,1.11.3,and avoid the version (,1.10.6),[1.11.0,1.11.3); Upgrade opensuse backports_sle to a higher version than 15.0,and avoid the version 15.0; Upgrade opensuse leap to a higher version than 15.0,15.1,42.3,and avoid the version 15.0,15.1,42.3; Upgrade suse linux_enterprise_server to a higher version than 12,and avoid the version 12; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0