{
  "cves": [
    "CVE-2026-10723",
    "CVE-2026-11331",
    "CVE-2026-11622",
    "CVE-2026-11721",
    "CVE-2026-13204",
    "CVE-2026-13321"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[32:9.18.29-14.8]\n- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)\n\n[32:9.18.29-14.7]\n- Reject out-of-zone NSEC next owner names (CVE-2026-13321,\n  RHEL-213314)\n\n[32:9.18.29-14.6]\n- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,\n  RHEL-213389)\n\n[32:9.18.29-14.5]\n- Reject invalid signed wildcard records (CVE-2026-11721,\n  RHEL-213417)\n\n[32:9.18.29-14.4]\n- Fix RPZ wildcard expansion self-referential CNAME\n  (CVE-2026-11331, RHEL-213495)\n\n[32:9.18.29-14.3]\n- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,\n  RHEL-213495)",
  "id": "ELSA-2026-55442",
  "ovalId": "oval:com.oracle.elsa:def:202655442",
  "source": "oracle_linux",
  "title": "ELSA-2026-55442:  bind9.18 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-55442.html"
}