You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa gradle

Sigurnosni nedostatak programskog paketa gradle

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

Fedora Update Notification
2019-08-19 01:01:06.548818

Name : gradle
Product : Fedora 30
Version : 4.4.1
Release : 4.fc30
Summary : Build automation tool
Description :
Gradle is build automation evolved. Gradle can automate the building,
testing, publishing, deployment and more of software packages or other
types of projects such as generated static websites, generated
documentation or indeed anything else.

Gradle combines the power and flexibility of Ant with the dependency
management and conventions of Maven into a more effective way to
build. Powered by a Groovy DSL and packed with innovation, Gradle
provides a declarative way to describe all kinds of builds through
sensible defaults. Gradle is quickly becoming the build system of
choice for many open source projects, leading edge enterprises and
legacy automation challenges.

Update Information:

Resolves CVE-2019-11065.

* Fri Aug 9 2019 Fabio Valentini <> – 4.4.1-4
– Use HTTPS for GoogleAPIs repository
– Resolves: CVE-2019-11065
* Fri Feb 1 2019 Fedora Release Engineering <> – 4.4.1-3
– Rebuilt for
* Wed Dec 5 2018 Mikolaj Izdebski <> – 4.4.1-2
– Add explicit dependency on English locale

[ 1 ] Bug #1698510 – CVE-2019-11065 gradle: Insecure HTTP URL used to download dependencies leading to possibly maliciously compromised artifacts. [fedora-29]

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-1b6383acdd’ at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list —
To unsubscribe send an email to
Fedora Code of Conduct:
List Guidelines:
List Archives:

AutorToni Vugdelija
Cert idNCERT-REF-2019-08-0001-ADV
More in Preporuke
Sigurnosni nedostatak programskog paketa hostapd

Otkriven je sigurnosni nedostatak u programskom paketu hostapd za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim udaljenim napadačima omogućuje otkrivanje osjetljivih...