[java-sig-commits] [Bug 1758993] New: CVE-2019-16370 gradle: PGP signing plugin security bypass [fedora-all]