-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2005-44
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 19 Apr 2005
 Last revised: 19 Apr 2005

 Package: sylpheed

 Summary: Two vulnerabilities discovered in Sylpheed

 More information:
    Sylpheed is a GTK+ based fast email client.

    Two buffer overflow vulnerabilities have been discovered in sylpheed.

 Impact:
    These vulnerabilities may allow remote attackers to execute arbitrary
    code via malformed e-mail messages.

 Affected Products:
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux 8 Server
    - Turbolinux 8 Workstation
    - Turbolinux 7 Server
    - Turbolinux 7 Workstation

 Solution:
    Please use the turbopkg (zabom) tool to apply the update. 
 ---------------------------------------------
 [Turbolinux 10 Server, Turbolinux 10 Desktop, Turbolinux 10 F..., 
  Turbolinux Home]
 # turbopkg
 or
 # zabom -u sylpheed

 [other]
 # turbopkg
 or
 # zabom update sylpheed
 ---------------------------------------------


 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/sylpheed-1.0.4-1.src.rpm
      2398056 500c463f902fd6dc18ca3c95d666ac2e

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/sylpheed-1.0.4-1.i586.rpm
      1359914 914d2fd69e350b2f7ee7b049dd28914a

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/sylpheed-1.0.4-1.src.rpm
      2398056 2eaf63a0db32ecb112134540aabd5dfe

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/sylpheed-1.0.4-1.i586.rpm
      1350808 2c8bbfccd9289afbeed0c478280eb936

 <Turbolinux 8 Workstation>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/sylpheed-1.0.4-1.src.rpm
      2398056 8fe252472662bc39697dacb5f4564cd2

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/sylpheed-1.0.4-1.i586.rpm
      1355431 70a289d52884158a771e547667a1cdf8

 <Turbolinux 7 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/sylpheed-1.0.4-1.src.rpm
      2398056 b302241d40bbe4f6aeca0d213d7a2e36

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/sylpheed-1.0.4-1.i586.rpm
      1333437 027ffe9c28b9f8c09b656a78fdc01c21

 <Turbolinux 7 Workstation>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/SRPMS/sylpheed-1.0.4-1.src.rpm
      2398056 93ef55b81d145bda4d351167628f5031

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/sylpheed-1.0.4-1.i586.rpm
      1343189 ee48a57d207781a715755939f6c9edb3


 References:

 sylpheed.good-day.net
   [Changes]
   http://sylpheed.good-day.net/changelog.html.en

 CVE
   [CAN-2005-0667]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0667
   [CAN-2005-0926]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0926

 --------------------------------------------------------------------------
 Revision History
    19 Apr 2005 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2005 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQFCZJ1LK0LzjOqIJMwRAvc3AKCjEffNK3nXINAhG2ndYSmPybLKJgCdG1qy
cBZJTQMXB0KjXgrhjTNVOgw=
=Hcso
-----END PGP SIGNATURE-----