-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-1b6383acdd 2019-08-19 01:01:06.548818 --------------------------------------------------------------------------------
Name : gradle Product : Fedora 30 Version : 4.4.1 Release : 4.fc30 URL : http://www.gradle.org/ Summary : Build automation tool Description : Gradle is build automation evolved. Gradle can automate the building, testing, publishing, deployment and more of software packages or other types of projects such as generated static websites, generated documentation or indeed anything else.
Gradle combines the power and flexibility of Ant with the dependency management and conventions of Maven into a more effective way to build. Powered by a Groovy DSL and packed with innovation, Gradle provides a declarative way to describe all kinds of builds through sensible defaults. Gradle is quickly becoming the build system of choice for many open source projects, leading edge enterprises and legacy automation challenges.
-------------------------------------------------------------------------------- Update Information:
Resolves CVE-2019-11065. -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 9 2019 Fabio Valentini decathorpe@gmail.com - 4.4.1-4 - Use HTTPS for GoogleAPIs repository - Resolves: CVE-2019-11065 * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 4.4.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Dec 5 2018 Mikolaj Izdebski mizdebsk@redhat.com - 4.4.1-2 - Add explicit dependency on English locale -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1698510 - CVE-2019-11065 gradle: Insecure HTTP URL used to download dependencies leading to possibly maliciously compromised artifacts. [fedora-29] https://bugzilla.redhat.com/show_bug.cgi?id=1698510 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-1b6383acdd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------