Changelog for
gradle-4.4.1-15.4.x86_64.rpm :
* Fri Aug 30 2024 Gus Kenion
- Security update- Added patch:
* gradle-CVE-2023-35946.patch + Fix CVE-2023-35946 [bsc#1212930], dependency cache writes files into an unintended location + Backport PathTraversalChecker.java from upstream version 8.2.0 and newer. Refactor for compatibility.
* Wed Jun 12 2024 Fridrich Strba - Added patch:
* gradle-jakarta-inject.patch + fix build with jakarta-inject, a new google-guice dependency
* Wed Apr 10 2024 Fridrich Strba - Added patch:
* gradle-plexus-xml.patch + fix build with the plexus-xml split from plexus-utils
* Tue Mar 26 2024 Fridrich Strba - security update- Added patch:
* gradle-CVE-2019-15052.patch + fix CVE-2019-15052 [bsc#1145903], authentication credentials are sent to all subsequent hosts that the request redirects to
* Fri Mar 08 2024 Fridrich Strba - Add missing dependency of aopalliance- Modified patches:
* 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch + add transitive dependency on aopalliance:aopalliance:1.0AATTjar
* 0013-Add-missing-transitive-dependencies.patch + add dependency on \'biz.aQute.bnd:biz.aQute.bnd.util:3.4.0AATTjar\' to fix build with newer aqute-bnd
* Fri Mar 08 2024 Fridrich Strba - Fix build breakage on SLE-15-SP2 after upgrades of different dependencies
* Wed Nov 01 2023 Fridrich Strba - Added patch:
* sourcetarget.patch + Build ALL modules with source/target levels 8
* Thu Apr 27 2023 pgajdosAATTsuse.com- security update- added patch:
* gradle-CVE-2021-32751.patch + fix CVE-2021-32751 [bsc#1188569], \'application\' plugin and the \'gradlew\' script are both vulnerable to arbitrary code execution
* Tue Apr 11 2023 Valentin Lefebvre - Added patch:
* use-nio-files-createTempFile-rather-than-File-createTempFile.patch + bsc#1184807 (CVE-2021-29428), bsc#1184799 (CVE-2021-29429)
* Mon May 23 2022 Fridrich Strba - Added patch:
* gradle-java17.patch + Allow actually build gradle using Java 16+
* Fri May 20 2022 Fridrich Strba - Modify the launcher so that gradle can work with Java 17- Do not force building with java <= 15, since we now can run gradle-bootstrap with Java 17 too
* Mon May 16 2022 Fridrich Strba - Build against jansi 2.x- Remove the jansi-native and hawtjni-runtime dependencies, since jansi 2.x does not depend on them- Modified patch:
* 0013-Add-missing-transitive-dependencies.patch + jansi does not have transitive dependencies any more- Added patch:
* gradle-jansi.patch + port to use jansi 2.x
* Wed Mar 23 2022 Fridrich Strba - Force building with java <= 11
* Mon Mar 14 2022 Fridrich Strba - Fix build with maven-resolver 1.7.x- Modified patch:
* 0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch + package the new artifact maven-resolver-named-locks
* Tue Mar 08 2022 Fridrich Strba - Remove from build dependencies some artifacts that are not needed
* Tue Oct 19 2021 Fridrich Strba - Modified patch:
* 0013-Add-missing-transitive-dependencies.patch + Add osgi-compendium to the dependencies, since newer qute-bnd uses it
* Wed Jul 28 2021 Fridrich Strba - Remove build requires that are not strictly needed
* Wed May 12 2021 Fridrich Strba - Do not build against the legacy guava20 package any more- Added patch:
* port-to-guava-30.patch + Port gradle 4.4.1 to guava 30.1.1 + Set source level to 1.8, since guava 30 uses default functions in interfaces, which is Java 8+ feature
