elsa-2026-55442

oracle_linux
Description

[32:9.18.29-14.8] - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) [32:9.18.29-14.7] - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) [32:9.18.29-14.6] - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) [32:9.18.29-14.5] - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) [32:9.18.29-14.4] - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) [32:9.18.29-14.3] - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495)

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-10723",
    "CVE-2026-11331",
    "CVE-2026-11622",
    "CVE-2026-11721",
    "CVE-2026-13204",
    "CVE-2026-13321"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[32:9.18.29-14.8]\n- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)\n\n[32:9.18.29-14.7]\n- Reject out-of-zone NSEC next owner names (CVE-2026-13321,\n  RHEL-213314)\n\n[32:9.18.29-14.6]\n- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,\n  RHEL-213389)\n\n[32:9.18.29-14.5]\n- Reject invalid signed wildcard records (CVE-2026-11721,\n  RHEL-213417)\n\n[32:9.18.29-14.4]\n- Fix RPZ wildcard expansion self-referential CNAME\n  (CVE-2026-11331, RHEL-213495)\n\n[32:9.18.29-14.3]\n- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,\n  RHEL-213495)",
  "id": "ELSA-2026-55442",
  "ovalId": "oval:com.oracle.elsa:def:202655442",
  "source": "oracle_linux",
  "title": "ELSA-2026-55442:  bind9.18 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-55442.html"
}
View JSON API Download JSON