{"cves":["CVE-2026-10723","CVE-2026-11331","CVE-2026-11622","CVE-2026-11721","CVE-2026-13204","CVE-2026-13321"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[32:9.16.23-0.22.12]\n- Fix NSEC3 signer validation (CVE-2026-10723)\n- Resolves: RHEL-213499\n\n[32:9.16.23-0.22.11]\n- Reject out-of-zone NSEC next owner names (CVE-2026-13321)\n- Resolves: RHEL-213313\n\n[32:9.16.23-0.22.10]\n- Fix CVE-2026-11622: reference-counted DNS cache slab headers\n- Resolves: RHEL-213396\n\n[32:9.16.23-0.22.9]\n- Fix CVE-2026-11721: RRSIG labels validation and out-of-zone signing\n- Add new unit test\n- Resolves: RHEL-213406\n\n[32:9.16.23-0.22.8]\n- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)\n- Add upstream rpz system test\n- Resolves: RHEL-213478\n\n[32:9.16.23-0.22.7]\n- Fix CVE-2026-13204: ensure NSEC/NSEC3 has matching RRSIG\n- Resolves: RHEL-213478","id":"ELSA-2026-54509","ovalId":"oval:com.oracle.elsa:def:202654509","source":"oracle_linux","title":"ELSA-2026-54509:  bind9.16 security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-54509.html"}