A security update has just been released. Most of the updates are for Win32 systems, but there are some fixes for Yahoo Mail and MS Exchange IMAP servers too. More info here: http://sylpheed.sraoss.jp/en/news.html Reproducible: Always
Apparently the Windows installer ships OpenSSL, so that security issue is not our concern.
Fixed in CVS. Thank you for reporting!