Gentoo GLSA-200405-25 Normal: tla Heap Overflow In libneon

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200405-25
                                            https://security.gentoo.org/

  Severity: Normal
     Title: tla: Heap-based buffer overflow in included libneon
      Date: May 30, 2004
      Bugs: #51586
        ID: 200405-25


Synopsis
=======
tla includes a vulnerable version of the neon library.

Background
=========
GNU Arch (tla) is a revision control system suited for widely
distributed development.

Affected packages
================
    -------------------------------------------------------------------
     Package       /    Vulnerable    /                     Unaffected
    -------------------------------------------------------------------
  1  dev-util/tla      < 1.2.1_pre1                      >= 1.2.1_pre1

==========
Stefan Esser discovered a vulnerability in the code of the neon library
(GLSA 200405-13): if a malicious date string is passed to the
ne_rf...
Read the Full Advisory