Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• RHSA-2003:312 vendor-advisory
• RHSA-2003:311 vendor-advisory
• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=107519
• http://bugzilla.gnome.org/show_bug.cgi?id=107025