On on., 2008-10-29 at 07:26 +0000, Duncan wrote: > Dag Ringdal <[EMAIL PROTECTED]> posted > [EMAIL PROTECTED], excerpted below, on Wed, 29 Oct 2008 > 02:00:10 +0100: > > > On ti., 2008-10-28 at 23:04 +0000, Duncan wrote: > >> Dag Ringdal <[EMAIL PROTECTED]> > >> posted [EMAIL PROTECTED], excerpted below, on Tue, 28 > >> Oct 2008 21:53:02 +0100: > >> > >> > When I click the icon nothing happens and when I type pan in a > >> > terminal I get the following error message: pan pan: parts.cc:244: > >> > void pan::Parts::set_parts(const pan::PartBatch&): Assertion `pch == > >> > part_mid_buf + part_mid_buf_len' failed. Aborted > >> > > >> You are suffering the *.nzb buffer overflow bug as corrected in 0.133, > >> altho some distributions have just patched their 0.132 version to fix > >> the bug. THIS IS A SECURITY VULNERABILTY, so you need to upgrade. > > >> Otherwise, if your distribution doesn't have an update, tell them to > >> get on the stick, as the bug has had a patch available for five months > >> now (late May)[1], and Charles released 0.133 on August 1. If they're > >> this far behind in security patches... well, are you sure you've chosen > >> the best distribution for your needs? > >> > >> Meanwhile, you can correct the aborted open by deleting the corrupted > >> tasks.nzb file in pan's data dir, ~/.pan2 by default > > > I'm running Ubuntu 8.04, and I have a 0.132 version av Pan. I have a > > OpenSUSE installation as well, not in the same box though, but Ubuntu is > > easy to administer. > > > > I removed the file you mentioned and Pan is running again. Who is > > reponsible to tell the tribes people at Ubuntu that the version they > > have in the repository is outdated? > > I was just wondering in another thread whether Ubuntu 8.04's pan 0.132 > had the patch. I guess that answers /that/ question! > > Checking bugs.launchpad, I see this bug, filed by Darren Albers on May > 29. Not so much as a hint anyone from Ubuntu has actually even seen it. > However, it's still listed as new for Ubuntu, no confirmation. If you're > registered at launchpad, you could at least subscribe the bug. I don't > know if they let users confirm or not, but if you can, I'd do so. Maybe > it'll get some attention! > > https://bugs.launchpad.net/fedora/+source/pan/+bug/235747 > I have subsrcibed to the listing afo the bug at Launcpad and added a comment. let us se what happens then.
dagr _______________________________________________ Pan-users mailing list [email protected] http://lists.nongnu.org/mailman/listinfo/pan-users
