Dag Ringdal <[EMAIL PROTECTED]> posted [EMAIL PROTECTED], excerpted below, on Wed, 29 Oct 2008 02:00:10 +0100:
> On ti., 2008-10-28 at 23:04 +0000, Duncan wrote: >> Dag Ringdal <[EMAIL PROTECTED]> >> posted [EMAIL PROTECTED], excerpted below, on Tue, 28 >> Oct 2008 21:53:02 +0100: >> >> > When I click the icon nothing happens and when I type pan in a >> > terminal I get the following error message: pan pan: parts.cc:244: >> > void pan::Parts::set_parts(const pan::PartBatch&): Assertion `pch == >> > part_mid_buf + part_mid_buf_len' failed. Aborted >> > >> You are suffering the *.nzb buffer overflow bug as corrected in 0.133, >> altho some distributions have just patched their 0.132 version to fix >> the bug. THIS IS A SECURITY VULNERABILTY, so you need to upgrade. >> Otherwise, if your distribution doesn't have an update, tell them to >> get on the stick, as the bug has had a patch available for five months >> now (late May)[1], and Charles released 0.133 on August 1. If they're >> this far behind in security patches... well, are you sure you've chosen >> the best distribution for your needs? >> >> Meanwhile, you can correct the aborted open by deleting the corrupted >> tasks.nzb file in pan's data dir, ~/.pan2 by default > I'm running Ubuntu 8.04, and I have a 0.132 version av Pan. I have a > OpenSUSE installation as well, not in the same box though, but Ubuntu is > easy to administer. > > I removed the file you mentioned and Pan is running again. Who is > reponsible to tell the tribes people at Ubuntu that the version they > have in the repository is outdated? I was just wondering in another thread whether Ubuntu 8.04's pan 0.132 had the patch. I guess that answers /that/ question! Checking bugs.launchpad, I see this bug, filed by Darren Albers on May 29. Not so much as a hint anyone from Ubuntu has actually even seen it. However, it's still listed as new for Ubuntu, no confirmation. If you're registered at launchpad, you could at least subscribe the bug. I don't know if they let users confirm or not, but if you can, I'd do so. Maybe it'll get some attention! https://bugs.launchpad.net/fedora/+source/pan/+bug/235747 -- Duncan - List replies preferred. No HTML msgs. "Every nonfree program has a lord, a master -- and if you use the program, he is your master." Richard Stallman _______________________________________________ Pan-users mailing list [email protected] http://lists.nongnu.org/mailman/listinfo/pan-users
