ELSA-2026-50250

ELSA-2026-50250 - dtrace security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-04-30

Description

[2.0.7-4]
- Prevent out-of-buonds memory access during object symbol table construction
(CVE-2026-35233). [Orabug: 39121881]
- Prevent divide-by-zero (FPE trap) if section header data is corrupted.
(CVE-2026-21996). [Orabug: 39121874]
- Ensure safety checks are performed on program header data from ELF objects.
- Ensure that the data of string table sections is proper terminated.
- Ensure that the symbol table references a valid string table.

Credit Statement:
The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle:
Vishal Panchani CVE-2026-35233 CVE-2026-21996

Related CVEs

CVE-2026-21996

CVE-2026-35233

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	dtrace-2.0.7-4.el8.src.rpm	dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba	-	ol8_aarch64_UEKR7
	dtrace-2.0.7-4.el8.aarch64.rpm	17d88b7a2e5f5767820c50930ad2ab51733b1e478646c64aedd13d6decd1709b	-	ol8_aarch64_UEKR7
	dtrace-devel-2.0.7-4.el8.aarch64.rpm	39b1449e38419c3a5863158203c05130564c422b67424f42b1e1e69e491d44de	-	ol8_aarch64_UEKR7
	dtrace-testsuite-2.0.7-4.el8.aarch64.rpm	7c7f49c7d61983028592ad910367e9ab13f226ed081b8ccc3c5d9d2ba6b02ecf	-	ol8_aarch64_UEKR7
Oracle Linux 8 (x86_64)	dtrace-2.0.7-4.el8.src.rpm	dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba	-	ol8_x86_64_UEKR7
	dtrace-2.0.7-4.el8.x86_64.rpm	9fab3bc300ad3f523782ee0060222ecb04e6ce390a5ac83c40c672a12dac5dae	-	ol8_x86_64_UEKR7
	dtrace-devel-2.0.7-4.el8.x86_64.rpm	abc28db5c56013e6c8b20515cb50557ea63b21c63a4dccaf4c9d3cdd05500217	-	ol8_x86_64_UEKR7
	dtrace-testsuite-2.0.7-4.el8.x86_64.rpm	38204af4e4505c2a11d9b9d13ef6826ed2283ae02952c6f00ffd39eb823899ef	-	ol8_x86_64_UEKR7
Oracle Linux 9 (aarch64)	dtrace-2.0.7-4.el9.src.rpm	6eb75eda77cea3bd20a3954894e47b25d95c13032e21f8a4cbd85057b05563c0	-	ol9_aarch64_UEKR8
	dtrace-2.0.7-4.el9.src.rpm	6eb75eda77cea3bd20a3954894e47b25d95c13032e21f8a4cbd85057b05563c0	-	ol9_aarch64_appstream
	dtrace-2.0.7-4.el9.src.rpm	6eb75eda77cea3bd20a3954894e47b25d95c13032e21f8a4cbd85057b05563c0	-	ol9_aarch64_baseos_latest
	dtrace-2.0.7-4.el9.src.rpm	6eb75eda77cea3bd20a3954894e47b25d95c13032e21f8a4cbd85057b05563c0	-	ol9_aarch64_u7_baseos_patch
	dtrace-2.0.7-4.el9.aarch64.rpm	7e7e51a049d9fe59bc2920065eb08b1cbb86c725fe29212bd8bffb8bf0673bfb	-	ol9_aarch64_UEKR8
	dtrace-2.0.7-4.el9.aarch64.rpm	7e7e51a049d9fe59bc2920065eb08b1cbb86c725fe29212bd8bffb8bf0673bfb	-	ol9_aarch64_baseos_latest
	dtrace-2.0.7-4.el9.aarch64.rpm	7e7e51a049d9fe59bc2920065eb08b1cbb86c725fe29212bd8bffb8bf0673bfb	-	ol9_aarch64_u7_baseos_patch
	dtrace-devel-2.0.7-4.el9.aarch64.rpm	9210171fb9692d2ca86137232e2ffffc93b84579f13439db69dbde1ae7b076ad	-	ol9_aarch64_UEKR8
	dtrace-devel-2.0.7-4.el9.aarch64.rpm	9210171fb9692d2ca86137232e2ffffc93b84579f13439db69dbde1ae7b076ad	-	ol9_aarch64_appstream
	dtrace-testsuite-2.0.7-4.el9.aarch64.rpm	7763b6d17167cdce254f55f0237da5323370d884c665961b7aaed033f6d19573	-	ol9_aarch64_UEKR8
	dtrace-testsuite-2.0.7-4.el9.aarch64.rpm	7763b6d17167cdce254f55f0237da5323370d884c665961b7aaed033f6d19573	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	dtrace-2.0.7-4.el9.src.rpm	6eb75eda77cea3bd20a3954894e47b25d95c13032e21f8a4cbd85057b05563c0	-	ol9_x86_64_UEKR7
	dtrace-2.0.7-4.el9.src.rpm	6eb75eda77cea3bd20a3954894e47b25d95c13032e21f8a4cbd85057b05563c0	-	ol9_x86_64_UEKR8
	dtrace-2.0.7-4.el9.x86_64.rpm	02a601a9f87402d3cfc2477b3dc97b5ad51eda64e11d7d9ad4e815066697b785	-	ol9_x86_64_UEKR7
	dtrace-2.0.7-4.el9.x86_64.rpm	02a601a9f87402d3cfc2477b3dc97b5ad51eda64e11d7d9ad4e815066697b785	-	ol9_x86_64_UEKR8
	dtrace-devel-2.0.7-4.el9.x86_64.rpm	d403dee5350bc9eafff7f48b946cb246d3e5a0d011723985f7e2bb01bc27d77a	-	ol9_x86_64_UEKR7
	dtrace-devel-2.0.7-4.el9.x86_64.rpm	d403dee5350bc9eafff7f48b946cb246d3e5a0d011723985f7e2bb01bc27d77a	-	ol9_x86_64_UEKR8
	dtrace-testsuite-2.0.7-4.el9.x86_64.rpm	1fa831df046cadd607d0c5b2079d58bc7675dbf0a8b550ec7af59914731a470e	-	ol9_x86_64_UEKR7
	dtrace-testsuite-2.0.7-4.el9.x86_64.rpm	1fa831df046cadd607d0c5b2079d58bc7675dbf0a8b550ec7af59914731a470e	-	ol9_x86_64_UEKR8

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team