{
  "cves": [
    "CVE-2026-10723",
    "CVE-2026-11331",
    "CVE-2026-11622",
    "CVE-2026-11721",
    "CVE-2026-13204",
    "CVE-2026-13321"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[9.16.23-40.0.1.el9_8.8]\n- Fix warning when changing device file permissions [Orabug: 36518580]\n\n[32:9.16.23-40.8]\n- Fix NSEC3 signer validation (CVE-2026-10723)\n\n[32:9.16.23-40.7]\n- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names\n\n[32:9.16.23-40.6]\n- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)\n\n[32:9.16.23-40.5]\n- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3\n  (CVE-2026-13204)\n\n[32:9.16.23-40.4]\n- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)\n\n[32:9.16.23-40.3]\n- Prevent cache memory exhaustion under sustained attack\n  (CVE-2026-11622, RHEL-213397)\n\n[32:9.16.23-40.2]\n- Fix GSS-API resource leak (CVE-2026-3039)\n- Invalid handling of CLASS != IN (CVE-2026-5946)\n\n[32:9.16.23-40.1]\n- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone\n  (CVE-2026-1519)",
  "id": "ELSA-2026-54510",
  "ovalId": "oval:com.oracle.elsa:def:202654510",
  "source": "oracle_linux",
  "title": "ELSA-2026-54510:  bind security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-54510.html"
}