[SECURITY] Fedora 32 Update: dia-0.97.3-16.fc32
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cbc0754798
2021-01-08 02:50:52.890179
--------------------------------------------------------------------------------
Name : dia
Product : Fedora 32
Version : 0.97.3
Release : 16.fc32
URL : https://wiki.gnome.org/Apps/Dia
Summary : Diagram drawing program
Description :
The Dia drawing program can be used to draw different types of diagrams, and
includes support for UML static structure diagrams (class diagrams),
entity relationship modeling, and network diagrams. Dia can load and
save diagrams to a custom file format, can load and save in .xml format,
and can export to PostScript(TM).
--------------------------------------------------------------------------------
Update Information:
- Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 31 2020 Robert Scheck <robert(a)fedoraproject.org> - 1:0.97.3-16
- Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:0.97.3-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 14 2020 Tom Stellard <tstellar(a)redhat.com> - 1:0.97.3-14
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1778767 - CVE-2019-19451 dia: infinite loop on filenames with invalid
encoding
https://bugzilla.redhat.com/show_bug.cgi?id=1778767
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cbc0754798' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------