{
  "cves": [
    "CVE-2026-10723",
    "CVE-2026-11622",
    "CVE-2026-11721",
    "CVE-2026-13204",
    "CVE-2026-13321"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[32:9.11.36-16.14]\n- Validate NSEC3 signer matches owning zone (CVE-2026-10723)\n\n[32:9.11.36-16.12]\n- Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204)\n\n[32:9.11.36-16.11]\n- Reject out-of-zone NSEC entries in DNSSEC validation\n  (CVE-2026-13321)\n\n[32:9.11.36-16.10]\n- Reject RRSIG records with invalid label counts (CVE-2026-11721)\n- Add unittest check\n\n[32:9.11.36-16.9]\n- Add reference counting to cache dns_slabheaders (CVE-2026-11622)",
  "id": "ELSA-2026-54654",
  "ovalId": "oval:com.oracle.elsa:def:202654654",
  "source": "oracle_linux",
  "title": "ELSA-2026-54654:  bind security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-54654.html"
}