CVE-2019-11065
1 advisory.
Maven/org.gradle:gradle-core CVE-2019-11065: medium 5.9
Insecure transport protocol in Gradle
Action: Upgrade org.gradle:gradle-core to 5.4.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4 | 5.4.0 | - |
Fixed versions
| 5.4.0 |
Sources
- osv: GHSA-pprq-4488-wgqx
- https://nvd.nist.gov/vuln/detail/CVE-2019-11065
- https://github.com/gradle/gradle/pull/8927
- https://github.com/gradle/gradle
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WVXOXNLAYRGPKAZV63PYNV3HF27JW2MW
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y43P7SVDJOG6OUDVFR4ZIDITZLNHPGTO
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQ5CGOV5QVQCSPGE3WRZDKUGIXLHSZDR
CVE-2019-11065 · published · modified · JSON