Summary
[2.0.6-1]
- Fix dtprobed unsafe probe description handling (CVE-2026-21991).
[Orabug: 39054018]
Credit Statement:
The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle:
Dhiraj Mishra: CVE-2026-21991
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | dtrace | 0:2.0.6-1.el10 |
| Oracle Linux · 9 | dtrace-devel | 0:2.0.6-1.el10 |
| Oracle Linux · 9 | dtrace-testsuite | 0:2.0.6-1.el10 |
Vulnerabilities 1
-
Medium 5.5
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.