elsa-2026-54509
oracle_linux[32:9.16.23-0.22.12] - Fix NSEC3 signer validation (CVE-2026-10723) - Resolves: RHEL-213499 [32:9.16.23-0.22.11] - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Resolves: RHEL-213313 [32:9.16.23-0.22.10] - Fix CVE-2026-11622: reference-counted DNS cache slab headers - Resolves: RHEL-213396 [32:9.16.23-0.22.9] - Fix CVE-2026-11721: RRSIG labels validation and out-of-zone signing - Add new unit test - Resolves: RHEL-213406 [32:9.16.23-0.22.8] - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Add upstream rpz system test - Resolves: RHEL-213478 [32:9.16.23-0.22.7] - Fix CVE-2026-13204: ensure NSEC/NSEC3 has matching RRSIG - Resolves: RHEL-213478
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2026-10723",
"CVE-2026-11331",
"CVE-2026-11622",
"CVE-2026-11721",
"CVE-2026-13204",
"CVE-2026-13321"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[32:9.16.23-0.22.12]\n- Fix NSEC3 signer validation (CVE-2026-10723)\n- Resolves: RHEL-213499\n\n[32:9.16.23-0.22.11]\n- Reject out-of-zone NSEC next owner names (CVE-2026-13321)\n- Resolves: RHEL-213313\n\n[32:9.16.23-0.22.10]\n- Fix CVE-2026-11622: reference-counted DNS cache slab headers\n- Resolves: RHEL-213396\n\n[32:9.16.23-0.22.9]\n- Fix CVE-2026-11721: RRSIG labels validation and out-of-zone signing\n- Add new unit test\n- Resolves: RHEL-213406\n\n[32:9.16.23-0.22.8]\n- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)\n- Add upstream rpz system test\n- Resolves: RHEL-213478\n\n[32:9.16.23-0.22.7]\n- Fix CVE-2026-13204: ensure NSEC/NSEC3 has matching RRSIG\n- Resolves: RHEL-213478",
"id": "ELSA-2026-54509",
"ovalId": "oval:com.oracle.elsa:def:202654509",
"source": "oracle_linux",
"title": "ELSA-2026-54509: bind9.16 security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2026-54509.html"
}