Again take a look at the differnce between 2.4.4 and 2.4.5 which was
just a security fix. The secunia advisorie tells the bug is in inc.c and
if you compare the versions 2.4.4 and 2.4.5 you see:

$diff sylpheed-2.4.4/src/inc.c sylpheed-2.4.5/src/inc.c
1367c1367
< alertpanel_error(err_msg);
---
> alertpanel_error("%s", err_msg);


So the author of sylpheed himself fixed this bug exaclty on this location in 
this way, so I think that more than a reliable reference and the error in 
sylpheed is in alertpanel_error and not alertpanel_error_log.

-- 
Sylpheed POP3 Format String Vulnerability
https://bugs.launchpad.net/bugs/136302
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to