Package: sylpheed Version: 3.5.0~beta1~r3426-1 Severity: normal Dear Maintainer,
This version of sylpheed appears to phone home to some server, and performs a version check. Doing the version check alone leaks information about the user (at a minimum, that they are running Sylpheed, and their IP address). This is a security problem. I did not check whether it leaks other information. Please disable this phoning home. (I see that there is a possibly related Debian bug 593962, but that bug concerns the update mechanism, and not the phoning home leak of information.) Thank you.
