Fedora Core 3: FEDORA-2006-378 Critical: Gnome Terminal Risks

Evolution is the GNOME mailer, calendar, contact manager and

communications tool. The tools which make up Evolution will

be tightly integrated with one another and act as a seamless

personal information-management tool.

There were several security flaws found in the mozilla package, which

evolution depends on. Users of evolution are advised to upgrade to this

updated package which has been rebuilt against a later version of

mozilla which is not vulnerable to these flaws.

- Removed explicit run-time spec-file requirement on mozilla.

The Mozilla NSS API/ABI stabilised by version 1.7.3

The libraries are always located in the libdir

However, the headers are in /usr/include/mozilla-1.7.6

and so they move each time the mozilla version changes.

So we no longer have an explicit mozilla run-time requirement in the

specfile;

a requirement on the appropriate NSS and NSPR .so files is

automagically generated on build.

We have an explicit, exact build-time version, so that we can find

the headers (without

invoking an RPM query from the spec file; to do so is considered bad

practice)

- Introduced mozilla_build_version, to replace mozilla_version (now 1.7.6)

7631fea197a1ccd056b1823be75a023c SRPMS/evolution-2.0.4-2.src.rpm

14c411da1ca80dff7aa6a625cc2c5365 x86_64/evolution-2.0.4-2.x86_64.rpm

4fc5867087714e7a59f5e1da1cc71e1d x86_64/evolution-devel-2.0.4-2.x86_64.rpm

0a17830e4f2b39aed9e7883c51421085

x86_64/debug/evolution-debuginfo-2.0.4-2.x86_64.rpm

35f623a4203d3ca943e423c6607e69b8 i386/evolution-2.0.4-2.i386.rpm

a940f9dd3baf9f54f91110e3488695f5 i386/evolution-devel-2.0.4-2.i386.rpm

fe42b6729dd452612e70bc941cba7226

i386/debug/evolution-debuginfo-2.0.4-2.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com