ELSA-2026-50251

ELSA-2026-50251 - dtrace security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-04-30

Description

[2.0.7-4]
- Prevent out-of-buonds memory access during object symbol table construction
(CVE-2026-35233). [Orabug: 39121881]
- Prevent divide-by-zero (FPE trap) if section header data is corrupted.
(CVE-2026-21996). [Orabug: 39121874]
- Ensure safety checks are performed on program header data from ELF objects.
- Ensure that the data of string table sections is proper terminated.
- Ensure that the symbol table references a valid string table.

Credit Statement:
The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle:
Vishal Panchani CVE-2026-35233 CVE-2026-21996

Related CVEs

CVE-2026-21996

CVE-2026-35233

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	dtrace-2.0.7-4.el8.src.rpm	dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba	-	ol8_aarch64_UEKR7
	dtrace-2.0.7-4.el8.src.rpm	dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba	-	ol8_aarch64_appstream
	dtrace-2.0.7-4.el8.src.rpm	dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba	-	ol8_aarch64_baseos_latest
	dtrace-2.0.7-4.el8.src.rpm	dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba	-	ol8_aarch64_u10_baseos_patch
	dtrace-2.0.7-4.el8.aarch64.rpm	17d88b7a2e5f5767820c50930ad2ab51733b1e478646c64aedd13d6decd1709b	-	ol8_aarch64_UEKR7
	dtrace-2.0.7-4.el8.aarch64.rpm	17d88b7a2e5f5767820c50930ad2ab51733b1e478646c64aedd13d6decd1709b	-	ol8_aarch64_baseos_latest
	dtrace-2.0.7-4.el8.aarch64.rpm	17d88b7a2e5f5767820c50930ad2ab51733b1e478646c64aedd13d6decd1709b	-	ol8_aarch64_u10_baseos_patch
	dtrace-devel-2.0.7-4.el8.aarch64.rpm	39b1449e38419c3a5863158203c05130564c422b67424f42b1e1e69e491d44de	-	ol8_aarch64_UEKR7
	dtrace-devel-2.0.7-4.el8.aarch64.rpm	39b1449e38419c3a5863158203c05130564c422b67424f42b1e1e69e491d44de	-	ol8_aarch64_appstream
	dtrace-testsuite-2.0.7-4.el8.aarch64.rpm	7c7f49c7d61983028592ad910367e9ab13f226ed081b8ccc3c5d9d2ba6b02ecf	-	ol8_aarch64_UEKR7
	dtrace-testsuite-2.0.7-4.el8.aarch64.rpm	7c7f49c7d61983028592ad910367e9ab13f226ed081b8ccc3c5d9d2ba6b02ecf	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	dtrace-2.0.7-4.el8.src.rpm	dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba	-	ol8_x86_64_UEKR6
	dtrace-2.0.7-4.el8.src.rpm	dcfaa3b7eba87906e1f38ad56d583f9229d4fb957701824c4be98007e71c50ba	-	ol8_x86_64_UEKR7
	dtrace-2.0.7-4.el8.x86_64.rpm	9fab3bc300ad3f523782ee0060222ecb04e6ce390a5ac83c40c672a12dac5dae	-	ol8_x86_64_UEKR6
	dtrace-2.0.7-4.el8.x86_64.rpm	9fab3bc300ad3f523782ee0060222ecb04e6ce390a5ac83c40c672a12dac5dae	-	ol8_x86_64_UEKR7
	dtrace-devel-2.0.7-4.el8.x86_64.rpm	abc28db5c56013e6c8b20515cb50557ea63b21c63a4dccaf4c9d3cdd05500217	-	ol8_x86_64_UEKR6
	dtrace-devel-2.0.7-4.el8.x86_64.rpm	abc28db5c56013e6c8b20515cb50557ea63b21c63a4dccaf4c9d3cdd05500217	-	ol8_x86_64_UEKR7
	dtrace-testsuite-2.0.7-4.el8.x86_64.rpm	38204af4e4505c2a11d9b9d13ef6826ed2283ae02952c6f00ffd39eb823899ef	-	ol8_x86_64_UEKR6
	dtrace-testsuite-2.0.7-4.el8.x86_64.rpm	38204af4e4505c2a11d9b9d13ef6826ed2283ae02952c6f00ffd39eb823899ef	-	ol8_x86_64_UEKR7

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team