USN-2482-1: elfutils vulnerability
23 January 2015
elfutils could be made to overwrite files in the root directory if it received a specially crafted file.
- elfutils - collection of utilities to handle ELF objects
Alexander Cherepanov discovered that libelf1 incorrectly handled certain
filesystem paths while extracting ar archives. An attacker could use this flaw
to perform a directory traversal attack on the root directory if the process
extracting the ar archive has write access to the root directory.
The problem can be corrected by updating your system to the following package versions:
After a standard system update you need to restart applications using libelf1
to make all the necessary changes.