- Fix CVE-2019-11500 - Download tarball from HTTPS instead of HTTP Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>