{"cves":["CVE-2026-19630","CVE-2026-19662","CVE-2026-94300"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[32:9.11.36-18]\n- CVE-2026-94300 bind: bind: Arbitrary code execution via GSS-TSIG\n  UDP message replay\n\n[32:9.11.36-17]\n- CVE-2026-19630 bind: BIND: Denial of Service via unbounded processing of crafted DNS messages\n  processing of crafted DNS messages\n\n[32:9.11.36-16.17]\n- Backport additional checks for the RDATASET_ATTR_ANCIENT flag when\n  looking for rdatasetheaders. Functions find_deepest_zonecut() and\n  cache_findzonecut() would otherwise pickup headers with the ancient\n  flag set, which other threads may attempt to free in the timespan between\n  unlocking the read lock and locking the write lock, causing\n  need_header_update() and update_header() to work with invalidated data.\n  (RHEL-257162)\n- Fix CVE-2026-19662. The patch for CVE-2026-11622, which added reference\n  counting to rdatasetheaders within rbtdb, introduced a regression where\n  under certain timing conditions concurrent recursive queries could cause\n  named to crash due to use-after-free.","id":"ELSA-2026-93925","ovalId":"oval:com.oracle.elsa:def:202693925","source":"oracle_linux","title":"ELSA-2026-93925:  bind security, bug fix, and enhancement update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-93925.html"}