Again take a look at the differnce between 2.4.4 and 2.4.5 which was
just a security fix. The secunia advisorie tells the bug is in inc.c and
if you compare the versions 2.4.4 and 2.4.5 you see:
$diff sylpheed-2.4.4/src/inc.c sylpheed-2.4.5/src/inc.c
1367c1367
< alertpanel_error(err_msg);
---
> alertpanel_error("%s", err_msg);
So the author of sylpheed himself fixed this bug exaclty on this location in
this way, so I think that more than a reliable reference and the error in
sylpheed is in alertpanel_error and not alertpanel_error_log.
--
Sylpheed POP3 Format String Vulnerability
https://bugs.launchpad.net/bugs/136302
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
