Wiz
Vulnerability DatabaseELSA-2020-5607-1

ELSA-2020-5607-1: 
Linux Oracle vulnerability analysis and mitigation

Overview

A bug fix update was released for fapolicyd in Oracle Linux 8, identified as ELSA-2020-5607-1. The update was released on December 17, 2020, and was classified as an important security update (Oracle Linux).

Technical details

The update addresses multiple issues including increasing db_max_size to 100M, fixing java detection, and resolving issues with DISA STIG during OS installation that caused 'ipa-server-install' to fail. The update applies to version 1.0-3.0.1.4 through 1.0-3.4 (Oracle Linux).

Impact

The vulnerability affected Oracle Linux 8 systems on both aarch64 and x86_64 architectures, potentially impacting system security and functionality (Oracle Linux).

Mitigation and workarounds

The issue has been addressed through updated packages: fapolicyd-1.0-3.0.1.el8_3.4 and fapolicyd-selinux-1.0-3.0.1.el8_3.4 for both aarch64 and x86_64 architectures. Users are advised to update to these latest versions (Oracle Linux).

Additional resources

Source: This report was generated using AI

Related Linux Oracle vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-70906HIGH7.5
  • Amazon Corretto JDK logoAmazon Corretto JDK
  • java-1.7.0-openjdk.src
NoYesAug 18, 2026
CVE-2026-61308MEDIUM6.8
  • Amazon Corretto JDK logoAmazon Corretto JDK
  • java-1.7.0-openjdk.src
NoYesAug 18, 2026
CVE-2026-73434MEDIUM6.1
  • NixOS logoNixOS
  • gstreamer1-plugins-good-qt
NoYesAug 12, 2026
CVE-2026-70907MEDIUM5.3
  • Amazon Corretto JDK logoAmazon Corretto JDK
  • openjdk-17
NoYesAug 18, 2026
CVE-2026-60589LOW3.7
  • Amazon Corretto JDK logoAmazon Corretto JDK
  • java-21-openjdk-headless-debuginfo
NoYesAug 18, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo