Debian Package Tracker
Register | Log in
Subscribe

gradle

Powerful build system for the JVM

Choose email to subscribe with

general
  • source: gradle (main)
  • version: 4.4.1-13
  • maintainer: Debian Java Maintainers (archive) (DMD)
  • uploaders: Kai-Chung Yan [DMD]
  • arch: all
  • std-ver: 4.5.1
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • oldstable: 3.2.1-1
  • stable: 4.4.1-6
  • testing: 4.4.1-13
  • unstable: 4.4.1-13
versioned links
  • 3.2.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4.4.1-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 4.4.1-13: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • gradle (4 bugs: 0, 3, 1, 0)
  • gradle-doc
  • libgradle-core-java (1 bugs: 0, 1, 0, 0)
  • libgradle-plugins-java (1 bugs: 0, 1, 0, 0)
action needed
A new upstream version is available: 7.0 high
A new upstream version 7.0 is available, you should consider packaging it.
Created: 2020-06-29 Last update: 2021-04-12 17:35
2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:
  • CVE-2019-15052: The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.
  • CVE-2019-16370: The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.
Created: 2021-02-19 Last update: 2021-03-21 19:04
Depends on packages which need a new maintainer normal
The packages that gradle depends on which need a new maintainer are:
  • dh-exec (#851746)
    • Build-Depends: dh-exec
Created: 2019-11-22 Last update: 2021-04-12 18:02
Does not build reproducibly during testing normal
A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!
Created: 2021-02-22 Last update: 2021-04-12 15:01
lintian reports 6 warnings normal
Lintian reports 6 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2021-04-11 Last update: 2021-04-11 10:17
3 low-priority security issues in buster low

There are 3 open security issues in buster.

2 issues left for the package maintainer to handle:
  • CVE-2019-11065: (needs triaging) Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site.
  • CVE-2019-15052: (needs triaging) The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.

You can find information about how to handle these issues in the security team's documentation.

1 ignored issue:
  • CVE-2019-16370: The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.
Created: 2021-02-19 Last update: 2021-03-21 19:04
news
[rss feed]
  • [2021-02-21] gradle 4.4.1-13 MIGRATED to testing (Debian testing watch)
  • [2021-02-11] Accepted gradle 4.4.1-13 (source) into unstable (Emmanuel Bourg)
  • [2020-08-26] gradle 4.4.1-12 MIGRATED to testing (Debian testing watch)
  • [2020-08-20] Accepted gradle 4.4.1-12 (source) into unstable (Andrej Shadura) (signed by: Andrew Shadura)
  • [2020-06-02] gradle 4.4.1-11 MIGRATED to testing (Debian testing watch)
  • [2020-05-27] Accepted gradle 4.4.1-11 (source) into unstable (Emmanuel Bourg)
  • [2019-12-15] gradle 4.4.1-10 MIGRATED to testing (Debian testing watch)
  • [2019-12-10] Accepted gradle 4.4.1-10 (source) into unstable (Hans-Christoph Steiner)
  • [2019-12-09] Accepted gradle 4.4.1-9 (source) into unstable (Hans-Christoph Steiner)
  • [2019-08-10] gradle 4.4.1-8 MIGRATED to testing (Debian testing watch)
  • [2019-08-05] Accepted gradle 4.4.1-8 (source) into unstable (Saif Abdul Cassim) (signed by: Emmanuel Bourg)
  • [2019-07-09] gradle 4.4.1-7 MIGRATED to testing (Debian testing watch)
  • [2019-06-27] Accepted gradle 4.4.1-7 (source) into unstable (Emmanuel Bourg)
  • [2019-06-26] gradle 4.4.1-6 MIGRATED to testing (Debian testing watch)
  • [2019-06-21] Accepted gradle 4.4.1-6 (source) into unstable (Emmanuel Bourg)
  • [2019-03-09] gradle 4.4.1-5 MIGRATED to testing (Debian testing watch)
  • [2019-02-26] Accepted gradle 4.4.1-5 (source) into unstable (Andrej Shadura)
  • [2019-01-20] gradle 4.4.1-4 MIGRATED to testing (Debian testing watch)
  • [2019-01-15] Accepted gradle 4.4.1-4 (source) into unstable (Emmanuel Bourg)
  • [2018-12-04] gradle 4.4.1-3 MIGRATED to testing (Debian testing watch)
  • [2018-11-29] Accepted gradle 4.4.1-3 (source) into unstable (tony mancill)
  • [2018-11-14] gradle 4.4.1-2 MIGRATED to testing (Debian testing watch)
  • [2018-11-09] Accepted gradle 4.4.1-2 (source) into unstable (Tiago Stürmer Daitx) (signed by: Emmanuel Bourg)
  • [2018-10-22] gradle 4.4.1-1 MIGRATED to testing (Debian testing watch)
  • [2018-10-03] Accepted gradle 4.4.1-1 (source) into unstable (Emmanuel Bourg)
  • [2018-10-01] Accepted gradle 4.4-3 (source) into unstable (Emmanuel Bourg)
  • [2018-09-17] Accepted gradle 4.4-2 (source) into unstable (Emmanuel Bourg)
  • [2018-09-16] Accepted gradle 3.4.1-8 (source) into unstable (Emmanuel Bourg)
  • [2018-05-18] Accepted gradle 4.4-1 (source) into experimental (Kai-Chung Yan (殷啟聰)) (signed by: Kai-Chung Yan)
  • [2018-05-14] gradle 3.4.1-7 MIGRATED to testing (Debian testing watch)
  • 1
  • 2
bugs [bug history graph]
  • all: 12 13
  • RC: 0
  • I&N: 9
  • M&W: 3 4
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian (0, 6)
  • buildd: logs, clang, reproducibility
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • screenshots
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 4.4.1-13
  • 4 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing