elfutils: Multiple vulnerabilities

Background

Elfutils provides a library and utilities to access, modify and analyse ELF objects.

Description

Multiple vulnerabilities have been discovered in elfutils. Please review the referenced CVE identifiers for details.

Impact

A remote attacker could possibly cause a Denial of Service condition via specially crafted ELF files.

Workaround

There is no known workaround at this time.

Resolution

All elfutils users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-libs/elfutils-0.169-r1"

Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.