Back to bug 2174854

Who When What Removed Added
RaTasha Tillery-Smith 2023-03-02 14:59:38 UTC Doc Text A flaw was found in Gradle when verifying long IDs of 64 bits for PGP keys in the trusted-key or PGP element. An attacker could take advantage of this and collision the dependency verification. This issue affects all confidentiality, integrity and availability. A flaw was found in Gradle when verifying long IDs of 64 bits for PGP keys in the trusted key or PGP element. This flaw allows an attacker to exploit this issue and collision the dependency verification.
Chess Hazlett 2023-03-09 22:30:02 UTC CC anstephe, avibelli, bgeorges, clement.escoffier, dandread, gsmet, hamadhan, jmartisk, lthon, max.andersen, peholase, pgallagh, probinso, rruss, rsvoboda, sbiarozk, sdouglas
errata-xmlrpc 2023-06-29 11:09:53 UTC Link ID Red Hat Product Errata RHSA-2023:3809
Product Security DevOps Team 2023-06-29 15:52:19 UTC Status NEW CLOSED
Resolution --- ERRATA
Last Closed 2023-06-29 15:52:19 UTC

Back to bug 2174854