[SECURITY] Fedora 33 Update: dia-0.97.3-16.fc33
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-1fe0e08c8d
2021-01-15 01:26:10.372585
--------------------------------------------------------------------------------
Name : dia
Product : Fedora 33
Version : 0.97.3
Release : 16.fc33
URL : https://wiki.gnome.org/Apps/Dia
Summary : Diagram drawing program
Description :
The Dia drawing program can be used to draw different types of diagrams, and
includes support for UML static structure diagrams (class diagrams),
entity relationship modeling, and network diagrams. Dia can load and
save diagrams to a custom file format, can load and save in .xml format,
and can export to PostScript(TM).
--------------------------------------------------------------------------------
Update Information:
- Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 31 2020 Robert Scheck <robert(a)fedoraproject.org> - 1:0.97.3-16
- Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1778767 - CVE-2019-19451 dia: infinite loop on filenames with invalid
encoding
https://bugzilla.redhat.com/show_bug.cgi?id=1778767
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-1fe0e08c8d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------