CVE-2014-9447

Updated elfutils packages fix security vulnerability:

Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program (CVE-2014-9447).

These are all security issues fixed in the elfutils-0.167-1.5 package on the GA media of openSUSE Tumbleweed.

elfutils was updated to fix one security issue.

This security issue was fixed:

• Directory traversal vulnerability in the read_long_names function (CVE-2014-9447).

elfutils has been updated to fix one security issue:

* CVE-2014-9447: Directory traversal vulnerability in the
  read_long_names function in libelf/elf_begin.c in elfutils 0.152 and
  0.161 allowed remote attackers to write to arbitrary files to the
  root directory via a / (slash) in a crafted archive, as demonstrated
  using the ar program (bnc#911662).

Security Issues:

* CVE-2014-9447
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9447>

Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.

Alexander Cherepanov discovered that libelf1 incorrectly handled certain filesystem paths while extracting ar archives. An attacker could use this flaw to perform a directory traversal attack on the root directory if the process extracting the ar archive has write access to the root directory.