Sylpheed MIME-Encoded Attachment Name Buffer Overflow Vulnerability

Solution:
This issue has been addressed in Sylpheed 1.0.4 and 1.9.5.

Fedora has released advisories and fixes for Fedora Core 2 and Core 3.

Upgrades are available for users of Gentoo Linux:

All Sylpheed users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/sylpheed-1.0.4"

All Sylpheed-claws users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/sylpheed-claws-1.0.4"

For more information, please see the referenced Gentoo Linux advisory.

TurboLinux has released advisory TLSA-2005-44 along with fixes dealing with this issue. Please see the referenced advisory for more information.


Red Hat Fedora Core2

Red Hat Fedora Core3

Sylpheed Sylpheed 0.8

Sylpheed Sylpheed 0.8.11

Sylpheed Sylpheed 0.9.10

Sylpheed Sylpheed 0.9.11

Sylpheed Sylpheed 0.9.12

Sylpheed Sylpheed 0.9.4

Sylpheed Sylpheed 0.9.5

Sylpheed Sylpheed 0.9.6

Sylpheed Sylpheed 0.9.7

Sylpheed Sylpheed 0.9.8

Sylpheed Sylpheed 0.9.9

Sylpheed Sylpheed 0.9.99

Sylpheed Sylpheed 1.0 .0

Sylpheed Sylpheed 1.0.1

Sylpheed Sylpheed 1.0.2

Sylpheed Sylpheed 1.0.3

Sylpheed Sylpheed 1.9

Sylpheed Sylpheed 1.9.1

Sylpheed Sylpheed 1.9.2

Sylpheed Sylpheed 1.9.3

Sylpheed Sylpheed 1.9.4


 

Privacy Statement
Copyright 2010, SecurityFocus