----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)  

If not, then implement it through the most reliable vulnerability
intelligence source on the market. 

Implement it through Secunia. 

For more information visit:
http://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to
discuss how we can help you with our capabilities contact us at:
sales@secunia.com

----------------------------------------------------------------------

TITLE:
Ubuntu update for pan

SECUNIA ADVISORY ID:
SA36981

VERIFY ADVISORY:
http://secunia.com/advisories/36981/

DESCRIPTION:
Ubuntu has issued an update for pan. This fixes a vulnerability,
which potentially can be exploited by malicious people to compromise
a user's system.

The vulnerability is caused due to a boundary error within the
PartsBatch class when processing certain NZB files. This may be
exploited to cause a buffer overflow and execute arbitrary code by
e.g. tricking a user into opening a specially crafted NZB file.

SOLUTION:
Apply updated packages.

-- Ubuntu 8.04 LTS --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132-2ubuntu2.1.diff.gz
Size/MD5: 20545 6d36e3b972652c124c93eff41dc5695b
http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132-2ubuntu2.1.dsc
Size/MD5: 877 593b70e1321f89cc1d3d79aaa0fcd431
http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132.orig.tar.gz
Size/MD5: 2069718 0999ea52f8d4187ac7c8fd416067b0e7

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132-2ubuntu2.1_amd64.deb
Size/MD5: 821136 10e791382ac078f206571407b9aca5b8

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/p/pan/pan_0.132-2ubuntu2.1_i386.deb
Size/MD5: 792564 5f4a69d8ce3dc342e20893020d1b2b2f

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/p/pan/pan_0.132-2ubuntu2.1_lpia.deb
Size/MD5: 815322 dff1b50f04af376b9476f5f9150b0b97

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/p/pan/pan_0.132-2ubuntu2.1_powerpc.deb
Size/MD5: 864758 9c63e15bd64326b9483ba916c089a00d

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/p/pan/pan_0.132-2ubuntu2.1_sparc.deb
Size/MD5: 885412 f0311151ff6ab621f97bbd6909253173

ORIGINAL ADVISORY:
USN-845-1:
https://lists.ubuntu.com/archives/ubuntu-security-announce/2009-October/000982.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------