{"cves":["CVE-2026-10723","CVE-2026-11331","CVE-2026-11622","CVE-2026-11721","CVE-2026-13204","CVE-2026-13321"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[32:9.18.29-14.8]\n- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)\n\n[32:9.18.29-14.7]\n- Reject out-of-zone NSEC next owner names (CVE-2026-13321,\n  RHEL-213314)\n\n[32:9.18.29-14.6]\n- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,\n  RHEL-213389)\n\n[32:9.18.29-14.5]\n- Reject invalid signed wildcard records (CVE-2026-11721,\n  RHEL-213417)\n\n[32:9.18.29-14.4]\n- Fix RPZ wildcard expansion self-referential CNAME\n  (CVE-2026-11331, RHEL-213495)\n\n[32:9.18.29-14.3]\n- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,\n  RHEL-213495)","id":"ELSA-2026-55442","ovalId":"oval:com.oracle.elsa:def:202655442","source":"oracle_linux","title":"ELSA-2026-55442:  bind9.18 security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-55442.html"}