Description
Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dia | 0.95.0-4 | — |
| Debian 13 | dia | 0.95.0-4 | — |
| Debian 12 | dia | 0.95.0-4 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | dia | 1:0.94-5.7.1 | RHSA-2006:0541 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | dia | 0.97.3-11.1 | openSUSE-SU-2024:10716-1 |
Advisories 2
- RHSA-2006:0541 Red Hat Security Advisory: dia security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10716-1 dia-0.97.3-11.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- FEDORA-2006-580 vendor-advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192830
- RHSA-2006:0541 vendor-advisory
- 20513 third-party-advisory
- 20422 third-party-advisory
- http://www.redhat.com/archives/fedora-security-list/2006-May/msg00099.html
- SUSE-SR:2006:012 vendor-advisory
- 1016203 vdb-entry
- 20254 third-party-advisory
- 18166 vdb-entry
- MDKSA-2006:093 vendor-advisory
- oval:org.mitre.oval:def:11600 vdb-entry signature
- 20339 third-party-advisory
- USN-286-1 vendor-advisory
- GLSA-200606-03 vendor-advisory
- 20457 third-party-advisory