Advisories » MGASA-2014-0415

Updated ctags package fixes security vulnerability

Publication date: 23 Oct 2014
Modification date: 23 Oct 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-7204

Description

A denial of service issue was discovered in ctags 5.8. A remote attacker could
cause excessive CPU usage and disk space consumption via a crafted JavaScript
file by triggering an infinite loop (CVE-2014-7204).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14277
• https://lists.fedoraproject.org/pipermail/package-announce/2014-October/140349.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7204

SRPMS

3/core

• ctags-5.8-6.1.mga3

4/core

• ctags-5.8-7.1.mga4