[SECURITY] Fedora Core 3 Update: evolution-2.0.4-2

Christopher Aillon caillon at redhat.com
Wed Mar 23 22:55:23 UTC 2005

Fedora Update Notification

Product     : Fedora Core 3
Name        : evolution
Version     : 2.0.4
Release     : 2
Summary     : GNOME's next-generation groupware suite
Description :
Evolution is the GNOME mailer, calendar, contact manager and
communications tool.  The tools which make up Evolution will
be tightly integrated with one another and act as a seamless
personal information-management tool.

Update Information:

There were several security flaws found in the mozilla package, which 
evolution depends on.  Users of evolution are advised to upgrade to this 
updated package which has been rebuilt against a later version of 
mozilla which is not vulnerable to these flaws.

* Wed Mar 23 2005 David Malcolm <dmalcolm at redhat.com> - 2.0.4-2

- Removed explicit run-time spec-file requirement on mozilla.
   The Mozilla NSS API/ABI stabilised by version 1.7.3
   The libraries are always located in the libdir
   However, the headers are in /usr/include/mozilla-1.7.6
   and so they move each time the mozilla version changes.
   So we no longer have an explicit mozilla run-time requirement in the 
   a requirement on the appropriate NSS and NSPR .so files is 
automagically generated on build.
   We have an explicit, exact build-time version, so that we can find 
the headers (without
   invoking an RPM query from the spec file; to do so is considered bad 
- Introduced mozilla_build_version, to replace mozilla_version (now 1.7.6)

This update can be downloaded from:

7631fea197a1ccd056b1823be75a023c  SRPMS/evolution-2.0.4-2.src.rpm
14c411da1ca80dff7aa6a625cc2c5365  x86_64/evolution-2.0.4-2.x86_64.rpm
4fc5867087714e7a59f5e1da1cc71e1d  x86_64/evolution-devel-2.0.4-2.x86_64.rpm
35f623a4203d3ca943e423c6607e69b8  i386/evolution-2.0.4-2.i386.rpm
a940f9dd3baf9f54f91110e3488695f5  i386/evolution-devel-2.0.4-2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.

More information about the announce mailing list