--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2020-cbc0754798
2021-01-08 02:50:52.890179
--------------------------------------------------------------------------------Name        : dia
Product     : Fedora 32
Version     : 0.97.3
Release     : 16.fc32
URL         : https://wiki.gnome.org/Apps/Dia
Summary     : Diagram drawing program
Description :
The Dia drawing program can be used to draw different types of diagrams, and
includes support for UML static structure diagrams (class diagrams),
entity relationship modeling, and network diagrams.  Dia can load and
save diagrams to a custom file format, can load and save in .xml format,
and can export to PostScript(TM).

--------------------------------------------------------------------------------Update Information:

 - Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
--------------------------------------------------------------------------------ChangeLog:

* Thu Dec 31 2020 Robert Scheck  - 1:0.97.3-16
- Added upstream patch to avoid infinite loop on filenames with invalid
  encoding (CVE-2019-19451, #1778767)
* Mon Jul 27 2020 Fedora Release Engineering  - 1:0.97.3-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 14 2020 Tom Stellard  - 1:0.97.3-14
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1778767 - CVE-2019-19451 dia: infinite loop on filenames with invalid encoding
        https://bugzilla.redhat.com/show_bug.cgi?id=1778767
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cbc0754798' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Fedora 32: dia 2020-cbc0754798

January 7, 2021
- Added upstream patch to avoid infinite loop on filenames with invalid encoding (CVE-2019-19451, #1778767)

Summary

The Dia drawing program can be used to draw different types of diagrams, and

includes support for UML static structure diagrams (class diagrams),

entity relationship modeling, and network diagrams. Dia can load and

save diagrams to a custom file format, can load and save in .xml format,

and can export to PostScript(TM).

- Added upstream patch to avoid infinite loop on filenames with invalid

encoding (CVE-2019-19451, #1778767)

* Thu Dec 31 2020 Robert Scheck - 1:0.97.3-16

- Added upstream patch to avoid infinite loop on filenames with invalid

encoding (CVE-2019-19451, #1778767)

* Mon Jul 27 2020 Fedora Release Engineering - 1:0.97.3-15

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Tue Jul 14 2020 Tom Stellard - 1:0.97.3-14

- Use make macros

- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro

[ 1 ] Bug #1778767 - CVE-2019-19451 dia: infinite loop on filenames with invalid encoding

https://bugzilla.redhat.com/show_bug.cgi?id=1778767

su -c 'dnf upgrade --advisory FEDORA-2020-cbc0754798' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

FEDORA-2020-cbc0754798 2021-01-08 02:50:52.890179 Product : Fedora 32 Version : 0.97.3 Release : 16.fc32 URL : https://wiki.gnome.org/Apps/Dia Summary : Diagram drawing program Description : The Dia drawing program can be used to draw different types of diagrams, and includes support for UML static structure diagrams (class diagrams), entity relationship modeling, and network diagrams. Dia can load and save diagrams to a custom file format, can load and save in .xml format, and can export to PostScript(TM). - Added upstream patch to avoid infinite loop on filenames with invalid encoding (CVE-2019-19451, #1778767) * Thu Dec 31 2020 Robert Scheck - 1:0.97.3-16 - Added upstream patch to avoid infinite loop on filenames with invalid encoding (CVE-2019-19451, #1778767) * Mon Jul 27 2020 Fedora Release Engineering - 1:0.97.3-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 14 2020 Tom Stellard - 1:0.97.3-14 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro [ 1 ] Bug #1778767 - CVE-2019-19451 dia: infinite loop on filenames with invalid encoding https://bugzilla.redhat.com/show_bug.cgi?id=1778767 su -c 'dnf upgrade --advisory FEDORA-2020-cbc0754798' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
Product : Fedora 32
Version : 0.97.3
Release : 16.fc32
URL : https://wiki.gnome.org/Apps/Dia
Summary : Diagram drawing program

Related News