pan-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Pan-users] Re: Can't get Pan Newsreader start


From: Duncan
Subject: [Pan-users] Re: Can't get Pan Newsreader start
Date: Wed, 29 Oct 2008 07:26:32 +0000 (UTC)
User-agent: Pan/0.133 (House of Butterflies)

Dag Ringdal <address@hidden> posted
address@hidden, excerpted below, on  Wed, 29 Oct 2008
02:00:10 +0100:

> On ti., 2008-10-28 at 23:04 +0000, Duncan wrote:
>> Dag Ringdal <address@hidden>
>> posted address@hidden, excerpted below, on  Tue, 28
>> Oct 2008 21:53:02 +0100:
>> 
>> > When I click the icon nothing happens and when I type pan in a
>> > terminal I get the following error message:  pan pan: parts.cc:244:
>> > void pan::Parts::set_parts(const pan::PartBatch&): Assertion `pch ==
>> > part_mid_buf + part_mid_buf_len' failed. Aborted
>> > 
>> You are suffering the *.nzb buffer overflow bug as corrected in 0.133,
>> altho some distributions have just patched their 0.132 version to fix
>> the bug.  THIS IS A SECURITY VULNERABILTY, so you need to upgrade.

>> Otherwise, if your distribution doesn't have an update, tell them to
>> get on the stick, as the bug has had a patch available for five months
>> now (late May)[1], and Charles released 0.133 on August 1.  If they're
>> this far behind in security patches... well, are you sure you've chosen
>> the best distribution for your needs?
>> 
>> Meanwhile, you can correct the aborted open by deleting the corrupted
>> tasks.nzb file in pan's data dir, ~/.pan2 by default

> I'm running Ubuntu 8.04, and I have a 0.132 version av Pan. I have a
> OpenSUSE installation as well, not in the same box though, but Ubuntu is
> easy to administer.
> 
> I removed the file you mentioned and Pan is running again. Who is
> reponsible to tell the tribes people at Ubuntu that the version they
> have in the repository is outdated?

I was just wondering in another thread whether Ubuntu 8.04's pan 0.132 
had the patch.  I guess that answers /that/ question!

Checking bugs.launchpad, I see this bug, filed by Darren Albers on May 
29.  Not so much as a hint anyone from Ubuntu has actually even seen it.  
However, it's still listed as new for Ubuntu, no confirmation.  If you're 
registered at launchpad, you could at least subscribe the bug.  I don't 
know if they let users confirm or not, but if you can, I'd do so.  Maybe 
it'll get some attention!

https://bugs.launchpad.net/fedora/+source/pan/+bug/235747

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman





reply via email to

[Prev in Thread] Current Thread [Next in Thread]