[sylpheed:33518] Re: Sylpheed 3.0beta5 released

[Hiroyuki Yamamoto]

Hello,

On Wed, 13 Jan 2010 11:20:26 -0700
Gene Goldenfeld <genegold at peoplepc.com> wrote:

> Gene Goldenfeld <genegold at peoplepc.com> wrote:
> 
> > On Wed, 13 Jan 2010 17:49:09 +0900
> > Hiroyuki Yamamoto <hiro-y at kcn.ne.jp> wrote:
> > 
> > > Hello,
> > > 
> > > Sylpheed 3.0beta5 has been released.
> > 
> > Secunia PSI (http://secunia.com/) still shows Sylpheed's
> > installation of GTK+ 2.x (v2.10.14.0), specifically the file
> > libgdk-win32-2.0-0.dll, as insecure, i.e., not up to date security
> > wise.  It points to gtk v2.18.5-1 at ftp.gnome.org for the current
> > version.  
> 
> Here's the results of a search gtk+ at Secunia's Advisory Database:
> http://secunia.com/advisories/search/?search=gtk%2B.  Since the
> insecure warning came up first with beta 4, I assume the recent
> advisories are the relevant ones.

This security issue will only appear when using foreign windows
(GtkSocket). It does not affect Sylpheed because it doesn't use the
feature.

-- 
Hiroyuki Yamamoto <hiro-y at kcn.ne.jp>