Re: [Pan-users] Re: Can't get Pan Newsreader start

[Dag Ringdal]

On on., 2008-10-29 at 07:26 +0000, Duncan wrote:
> Dag Ringdal <address@hidden> posted
> address@hidden, excerpted below, on  Wed, 29 Oct 2008
> 02:00:10 +0100:
> 
> > On ti., 2008-10-28 at 23:04 +0000, Duncan wrote:
> >> Dag Ringdal <address@hidden>
> >> posted address@hidden, excerpted below, on  Tue, 28
> >> Oct 2008 21:53:02 +0100:
> >> 
> >> > When I click the icon nothing happens and when I type pan in a
> >> > terminal I get the following error message:  pan pan: parts.cc:244:
> >> > void pan::Parts::set_parts(const pan::PartBatch&): Assertion `pch ==
> >> > part_mid_buf + part_mid_buf_len' failed. Aborted
> >> > 
> >> You are suffering the *.nzb buffer overflow bug as corrected in 0.133,
> >> altho some distributions have just patched their 0.132 version to fix
> >> the bug.  THIS IS A SECURITY VULNERABILTY, so you need to upgrade.
> 
> >> Otherwise, if your distribution doesn't have an update, tell them to
> >> get on the stick, as the bug has had a patch available for five months
> >> now (late May)[1], and Charles released 0.133 on August 1.  If they're
> >> this far behind in security patches... well, are you sure you've chosen
> >> the best distribution for your needs?
> >> 
> >> Meanwhile, you can correct the aborted open by deleting the corrupted
> >> tasks.nzb file in pan's data dir, ~/.pan2 by default
> 
> > I'm running Ubuntu 8.04, and I have a 0.132 version av Pan. I have a
> > OpenSUSE installation as well, not in the same box though, but Ubuntu is
> > easy to administer.
> > 
> > I removed the file you mentioned and Pan is running again. Who is
> > reponsible to tell the tribes people at Ubuntu that the version they
> > have in the repository is outdated?
> 
> I was just wondering in another thread whether Ubuntu 8.04's pan 0.132 
> had the patch.  I guess that answers /that/ question!
> 
> Checking bugs.launchpad, I see this bug, filed by Darren Albers on May 
> 29.  Not so much as a hint anyone from Ubuntu has actually even seen it.  
> However, it's still listed as new for Ubuntu, no confirmation.  If you're 
> registered at launchpad, you could at least subscribe the bug.  I don't 
> know if they let users confirm or not, but if you can, I'd do so.  Maybe 
> it'll get some attention!
> 
> https://bugs.launchpad.net/fedora/+source/pan/+bug/235747
> 
I have subsrcibed  to the listing afo the bug at Launcpad and added a
comment. let us se what happens then.

dagr