elsa-2026-54654
oracle_linux
Description
[32:9.11.36-16.14] - Validate NSEC3 signer matches owning zone (CVE-2026-10723) [32:9.11.36-16.12] - Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204) [32:9.11.36-16.11] - Reject out-of-zone NSEC entries in DNSSEC validation (CVE-2026-13321) [32:9.11.36-16.10] - Reject RRSIG records with invalid label counts (CVE-2026-11721) - Add unittest check [32:9.11.36-16.9] - Add reference counting to cache dns_slabheaders (CVE-2026-11622)
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cves": [
"CVE-2026-10723",
"CVE-2026-11622",
"CVE-2026-11721",
"CVE-2026-13204",
"CVE-2026-13321"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[32:9.11.36-16.14]\n- Validate NSEC3 signer matches owning zone (CVE-2026-10723)\n\n[32:9.11.36-16.12]\n- Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204)\n\n[32:9.11.36-16.11]\n- Reject out-of-zone NSEC entries in DNSSEC validation\n (CVE-2026-13321)\n\n[32:9.11.36-16.10]\n- Reject RRSIG records with invalid label counts (CVE-2026-11721)\n- Add unittest check\n\n[32:9.11.36-16.9]\n- Add reference counting to cache dns_slabheaders (CVE-2026-11622)",
"id": "ELSA-2026-54654",
"ovalId": "oval:com.oracle.elsa:def:202654654",
"source": "oracle_linux",
"title": "ELSA-2026-54654: bind security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2026-54654.html"
}