{
  "cves": [
    "CVE-2026-10723",
    "CVE-2026-11331",
    "CVE-2026-11622",
    "CVE-2026-11721",
    "CVE-2026-13204",
    "CVE-2026-13321"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[32:9.16.23-0.22.12]\n- Fix NSEC3 signer validation (CVE-2026-10723)\n- Resolves: RHEL-213499\n\n[32:9.16.23-0.22.11]\n- Reject out-of-zone NSEC next owner names (CVE-2026-13321)\n- Resolves: RHEL-213313\n\n[32:9.16.23-0.22.10]\n- Fix CVE-2026-11622: reference-counted DNS cache slab headers\n- Resolves: RHEL-213396\n\n[32:9.16.23-0.22.9]\n- Fix CVE-2026-11721: RRSIG labels validation and out-of-zone signing\n- Add new unit test\n- Resolves: RHEL-213406\n\n[32:9.16.23-0.22.8]\n- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)\n- Add upstream rpz system test\n- Resolves: RHEL-213478\n\n[32:9.16.23-0.22.7]\n- Fix CVE-2026-13204: ensure NSEC/NSEC3 has matching RRSIG\n- Resolves: RHEL-213478",
  "id": "ELSA-2026-54509",
  "ovalId": "oval:com.oracle.elsa:def:202654509",
  "source": "oracle_linux",
  "title": "ELSA-2026-54509:  bind9.16 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-54509.html"
}