Hi Ricardo,

  "Sun, 6 Mar 2005 13:35:15 +0100", "Ricardo Mones"
  "Re: Bug#298173: sylpheed: [security] buffer overflow (=< 1.0.2), now 1.0.3 
is released"
>  There was no security bug at the time I made the packages (see their
>dates), that's the reason there are no references to this bug there.

 Ah, OK. But if you would note about security fix in changelog 
 when you notice it, we can track it more easier, I think.


>>  * Is fixed version in woody available?
>
>  No, still not, sorry. That will take some time I currently lack, so
>patches are fully welcome :)

 I've contacted to upstream author Hiroyuki Yamamoto, he checked it
 carefully and it found that vulnerability exists after 0.8.0, so 
 there is no security bug in woody's version.

 Thanks a lot, Hiroyuki! :)





-- 
Regards,

 Hideki Yamane <henrich @ samba.gr.jp/iijmio-mail.jp>
 Key fingerprint = 4555 82ED 38B6 C870 E099  388C 22ED 21CB C4C7 264B



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to