Directory traversal vulnerability was reported in elfutils  'ar' utility.
Upstream commit with the analysis:
Created elfutils tracking bugs for this issue:
Affects: fedora-all [bug 1181525]
elfutils-0.161-2.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.
elfutils-0.161-2.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
Fixed in RHEL6 via RHEA-2015:1302.
Fixed in RHEL7 via RHEA-2015:2126.