elsa-2026-55437

oracle_linux
Description

[9.18.33-15.0.1.el10_2.10] - Hard require needed openssl-libs [Orabug: 38742109] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.18.33-15.10] - Validate NSEC3 signer matches owning zone (CVE-2026-10723) [32:9.18.33-15.9] - Reject out-of-zone NSEC next owner names (CVE-2026-13321) [32:9.18.33-15.7] - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) [32:9.18.33-15.6] - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) [32:9.18.33-15.5] - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) [32:9.18.33-15.4] - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) [32:9.18.33-15.2] - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) [32:9.18.33-15.1] - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-10723",
    "CVE-2026-11331",
    "CVE-2026-11622",
    "CVE-2026-11721",
    "CVE-2026-13204",
    "CVE-2026-13321"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[9.18.33-15.0.1.el10_2.10]\n- Hard require needed openssl-libs [Orabug: 38742109]\n- Fix warning when changing device file permissions [Orabug: 36518580]\n\n[32:9.18.33-15.10]\n- Validate NSEC3 signer matches owning zone (CVE-2026-10723)\n\n[32:9.18.33-15.9]\n- Reject out-of-zone NSEC next owner names (CVE-2026-13321)\n\n[32:9.18.33-15.7]\n- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)\n\n[32:9.18.33-15.6]\n- Fix RRSIG label count validation for wildcard cache poisoning\n  (CVE-2026-11721)\n\n[32:9.18.33-15.5]\n- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)\n\n[32:9.18.33-15.4]\n- Fix assertion failure on malformed NSEC/NSEC3 responses\n  (CVE-2026-13204)\n\n[32:9.18.33-15.2]\n- Fix GSS-API resource leak (CVE-2026-3039)\n- Invalid handling of CLASS != IN (CVE-2026-5946)\n\n[32:9.18.33-15.1]\n- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone\n  (CVE-2026-1519)",
  "id": "ELSA-2026-55437",
  "ovalId": "oval:com.oracle.elsa:def:202655437",
  "source": "oracle_linux",
  "title": "ELSA-2026-55437:  bind security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-55437.html"
}
View JSON API Download JSON