An evolution security update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-255
2005-03-23
---------------------------------------------------------------------
Product : Fedora Core 3
Name : evolution
Version : 2.0.4
Release : 2
Summary : GNOME's next-generation groupware suite
Description :
Evolution is the GNOME mailer, calendar, contact manager and
communications tool. The tools which make up Evolution will
be tightly integrated with one another and act as a seamless
personal information-management tool.
---------------------------------------------------------------------
Update Information:
There were several security flaws found in the mozilla package, which evolution depends on. Users of evolution are advised to upgrade to this updated package which has been rebuilt against a later version of mozilla which is not vulnerable to these flaws.
---------------------------------------------------------------------
* Wed Mar 23 2005 David Malcolm <dmalcolm@redhat.com> - 2.0.4-2
- Removed explicit run-time spec-file requirement on mozilla.
The Mozilla NSS API/ABI stabilised by version 1.7.3
The libraries are always located in the libdir
However, the headers are in /usr/include/mozilla-1.7.6
and so they move each time the mozilla version changes.
So we no longer have an explicit mozilla run-time requirement in the
specfile;
a requirement on the appropriate NSS and NSPR .so files is
automagically generated on build.
We have an explicit, exact build-time version, so that we can find
the headers (without
invoking an RPM query from the spec file; to do so is considered bad
practice)
- Introduced mozilla_build_version, to replace mozilla_version (now 1.7.6)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
7631fea197a1ccd056b1823be75a023c SRPMS/evolution-2.0.4-2.src.rpm
14c411da1ca80dff7aa6a625cc2c5365 x86_64/evolution-2.0.4-2.x86_64.rpm
4fc5867087714e7a59f5e1da1cc71e1d x86_64/evolution-devel-2.0.4-2.x86_64.rpm
0a17830e4f2b39aed9e7883c51421085
x86_64/debug/evolution-debuginfo-2.0.4-2.x86_64.rpm
35f623a4203d3ca943e423c6607e69b8 i386/evolution-2.0.4-2.i386.rpm
a940f9dd3baf9f54f91110e3488695f5 i386/evolution-devel-2.0.4-2.i386.rpm
fe42b6729dd452612e70bc941cba7226
i386/debug/evolution-debuginfo-2.0.4-2.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-255
2005-03-23
---------------------------------------------------------------------
Product : Fedora Core 3
Name : evolution
Version : 2.0.4
Release : 2
Summary : GNOME's next-generation groupware suite
Description :
Evolution is the GNOME mailer, calendar, contact manager and
communications tool. The tools which make up Evolution will
be tightly integrated with one another and act as a seamless
personal information-management tool.
---------------------------------------------------------------------
Update Information:
There were several security flaws found in the mozilla package, which evolution depends on. Users of evolution are advised to upgrade to this updated package which has been rebuilt against a later version of mozilla which is not vulnerable to these flaws.
---------------------------------------------------------------------
* Wed Mar 23 2005 David Malcolm <dmalcolm@redhat.com> - 2.0.4-2
- Removed explicit run-time spec-file requirement on mozilla.
The Mozilla NSS API/ABI stabilised by version 1.7.3
The libraries are always located in the libdir
However, the headers are in /usr/include/mozilla-1.7.6
and so they move each time the mozilla version changes.
So we no longer have an explicit mozilla run-time requirement in the
specfile;
a requirement on the appropriate NSS and NSPR .so files is
automagically generated on build.
We have an explicit, exact build-time version, so that we can find
the headers (without
invoking an RPM query from the spec file; to do so is considered bad
practice)
- Introduced mozilla_build_version, to replace mozilla_version (now 1.7.6)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
7631fea197a1ccd056b1823be75a023c SRPMS/evolution-2.0.4-2.src.rpm
14c411da1ca80dff7aa6a625cc2c5365 x86_64/evolution-2.0.4-2.x86_64.rpm
4fc5867087714e7a59f5e1da1cc71e1d x86_64/evolution-devel-2.0.4-2.x86_64.rpm
0a17830e4f2b39aed9e7883c51421085
x86_64/debug/evolution-debuginfo-2.0.4-2.x86_64.rpm
35f623a4203d3ca943e423c6607e69b8 i386/evolution-2.0.4-2.i386.rpm
a940f9dd3baf9f54f91110e3488695f5 i386/evolution-devel-2.0.4-2.i386.rpm
fe42b6729dd452612e70bc941cba7226
i386/debug/evolution-debuginfo-2.0.4-2.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
