——————————————————————————–
Fedora Update Notification
FEDORA-2020-cbc0754798
2021-01-08 02:50:52.890179
——————————————————————————–

Name : dia
Product : Fedora 32
Version : 0.97.3
Release : 16.fc32
URL : https://wiki.gnome.org/Apps/Dia
Summary : Diagram drawing program
Description :
The Dia drawing program can be used to draw different types of diagrams, and
includes support for UML static structure diagrams (class diagrams),
entity relationship modeling, and network diagrams. Dia can load and
save diagrams to a custom file format, can load and save in .xml format,
and can export to PostScript(TM).

——————————————————————————–
Update Information:

– Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
——————————————————————————–
ChangeLog:

* Thu Dec 31 2020 Robert Scheck <robert@fedoraproject.org> – 1:0.97.3-16
– Added upstream patch to avoid infinite loop on filenames with invalid
encoding (CVE-2019-19451, #1778767)
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> – 1:0.97.3-15
– Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 14 2020 Tom Stellard <tstellar@redhat.com> – 1:0.97.3-14
– Use make macros
– https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
——————————————————————————–
References:

[ 1 ] Bug #1778767 – CVE-2019-19451 dia: infinite loop on filenames with invalid encoding
https://bugzilla.redhat.com/show_bug.cgi?id=1778767
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-cbc0754798’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org