Again take a look at the differnce between 2.4.4 and 2.4.5 which was just a security fix. The secunia advisorie tells the bug is in inc.c and if you compare the versions 2.4.4 and 2.4.5 you see:
$diff sylpheed-2.4.4/src/inc.c sylpheed-2.4.5/src/inc.c 1367c1367 < alertpanel_error(err_msg); --- > alertpanel_error("%s", err_msg); So the author of sylpheed himself fixed this bug exaclty on this location in this way, so I think that more than a reliable reference and the error in sylpheed is in alertpanel_error and not alertpanel_error_log. -- Sylpheed POP3 Format String Vulnerability https://bugs.launchpad.net/bugs/136302 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs