{"cves":["CVE-2026-19630","CVE-2026-19662","CVE-2026-94300","CVE-2026-96888","CVE-2026-97313"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[32:9.16.23-0.22.21]\n- CVE-2026-94300 bind9.16: bind: Arbitrary code execution via\n  GSS-TSIG UDP message replay\n\n[32:9.16.23-0.22.20]\n- CVE-2026-97313 bind9.16: bind: Denial of service via assertion\n  failure in RPZ query processing\n\n[32:9.16.23-0.22.19]\n- CVE-2026-96888 bind9.16: bind: Denial of Service via assertion failure\n  during redirect processing\n\n[32:9.16.23-0.22.18]\n- CVE-2026-19630 bind9.16: BIND: Denial of Service via unbounded processing of crafted DNS messages\n  processing of crafted DNS messages\n\n[32:9.16.23-0.22.17]\n- Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.","id":"ELSA-2026-94011","ovalId":"oval:com.oracle.elsa:def:202694011","source":"oracle_linux","title":"ELSA-2026-94011:  bind9.16 security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-94011.html"}