Fedora 31: FEDORA-2019-abc1234efg Important: Gradle Security Patch Applied

Gradle is build automation evolved. Gradle can automate the building,

testing, publishing, deployment and more of software packages or other

types of projects such as generated static websites, generated

documentation or indeed anything else.

Gradle combines the power and flexibility of Ant with the dependency

management and conventions of Maven into a more effective way to

build. Powered by a Groovy DSL and packed with innovation, Gradle

provides a declarative way to describe all kinds of builds through

sensible defaults. Gradle is quickly becoming the build system of

choice for many open source projects, leading edge enterprises and

legacy automation challenges.

Resolves CVE-2019-11065.

* Fri Aug 9 2019 Fabio Valentini - 4.4.1-4

- Use HTTPS for GoogleAPIs repository

- Resolves: CVE-2019-11065

* Fri Feb 1 2019 Fedora Release Engineering - 4.4.1-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

* Wed Dec 5 2018 Mikolaj Izdebski - 4.4.1-2

- Add explicit dependency on English locale

[ 1 ] Bug #1698510 - CVE-2019-11065 gradle: Insecure HTTP URL used to download dependencies leading to possibly maliciously compromised artifacts. [fedora-29]

https://bugzilla.redhat.com/show_bug.cgi?id=1698510

su -c 'dnf upgrade --advisory FEDORA-2019-1b6383acdd' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/