<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:red-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd">
<generator>
<oval:product_name>Oracle Errata System</oval:product_name>
<oval:product_version>Oracle Linux</oval:product_version>
<oval:schema_version>5.11</oval:schema_version>
<oval:timestamp>2026-08-14T10:39:17</oval:timestamp>
</generator>
<definitions>
<definition id="oval:com.oracle.elsa:def:202654654" version="501" class="patch">
<metadata>
<title>
ELSA-2026-54654:  bind security update (IMPORTANT)
</title>
<affected family="unix">
<platform>Oracle Linux 8</platform>

</affected>
<reference source="elsa" ref_id="ELSA-2026-54654" ref_url="https://linux.oracle.com/errata/ELSA-2026-54654.html"/>
<reference source="CVE" ref_id="CVE-2026-10723" ref_url="https://linux.oracle.com/cve/CVE-2026-10723.html"/>
<reference source="CVE" ref_id="CVE-2026-11622" ref_url="https://linux.oracle.com/cve/CVE-2026-11622.html"/>
<reference source="CVE" ref_id="CVE-2026-11721" ref_url="https://linux.oracle.com/cve/CVE-2026-11721.html"/>
<reference source="CVE" ref_id="CVE-2026-13204" ref_url="https://linux.oracle.com/cve/CVE-2026-13204.html"/>
<reference source="CVE" ref_id="CVE-2026-13321" ref_url="https://linux.oracle.com/cve/CVE-2026-13321.html"/>

<description>
[32:9.11.36-16.14]
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)

[32:9.11.36-16.12]
- Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204)

[32:9.11.36-16.11]
- Reject out-of-zone NSEC entries in DNSSEC validation
  (CVE-2026-13321)

[32:9.11.36-16.10]
- Reject RRSIG records with invalid label counts (CVE-2026-11721)
- Add unittest check

[32:9.11.36-16.9]
- Add reference counting to cache dns_slabheaders (CVE-2026-11622)
</description>
<!--
 ~~~~~~~~~~~~~~~~~~~~   advisory details   ~~~~~~~~~~~~~~~~~~~ 
-->
<advisory>
<severity>IMPORTANT</severity>
<rights>Copyright 2026 Oracle, Inc.</rights>
<issued date="2026-08-13"/>
<cve cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://linux.oracle.com/cve/CVE-2026-10723.html" public="20260722">CVE-2026-10723</cve>
<cve cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://linux.oracle.com/cve/CVE-2026-11622.html" public="20260722">CVE-2026-11622</cve>
<cve cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://linux.oracle.com/cve/CVE-2026-11721.html" public="20260722">CVE-2026-11721</cve>
<cve cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://linux.oracle.com/cve/CVE-2026-13204.html" public="20260722">CVE-2026-13204</cve>
<cve cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://linux.oracle.com/cve/CVE-2026-13321.html" public="20260722">CVE-2026-13321</cve>

<affected_cpe_list>
<cpe>cpe:/o:oracle:linux:8::baseos_latest</cpe>
<cpe>cpe:/o:oracle:linux:8:10:baseos_patch</cpe>
<cpe>cpe:/a:oracle:linux:8::appstream</cpe>
</affected_cpe_list>
</advisory>
</metadata>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654001" comment="Oracle Linux 8 is installed"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654002" comment="Oracle Linux arch is aarch64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654003" comment="bind is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654004" comment="bind is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654005" comment="bind-chroot is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654006" comment="bind-chroot is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654007" comment="bind-devel is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654008" comment="bind-devel is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654009" comment="bind-libs is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654010" comment="bind-libs is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654011" comment="bind-libs-lite is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654012" comment="bind-libs-lite is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654013" comment="bind-license is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654014" comment="bind-license is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654015" comment="bind-lite-devel is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654016" comment="bind-lite-devel is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654017" comment="bind-pkcs11 is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654018" comment="bind-pkcs11 is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654019" comment="bind-pkcs11-devel is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654020" comment="bind-pkcs11-devel is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654021" comment="bind-pkcs11-libs is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654022" comment="bind-pkcs11-libs is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654023" comment="bind-pkcs11-utils is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654024" comment="bind-pkcs11-utils is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654025" comment="bind-sdb is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654026" comment="bind-sdb is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654027" comment="bind-sdb-chroot is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654028" comment="bind-sdb-chroot is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654029" comment="bind-utils is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654030" comment="bind-utils is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654031" comment="python3-bind is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654032" comment="python3-bind is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654033" comment="bind-export-devel is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654034" comment="bind-export-devel is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654035" comment="bind-export-libs is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654036" comment="bind-export-libs is signed with the Oracle Linux 8 key"/>
</criteria>
</criteria>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654037" comment="Oracle Linux arch is x86_64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654003" comment="bind is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654004" comment="bind is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654005" comment="bind-chroot is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654006" comment="bind-chroot is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654007" comment="bind-devel is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654008" comment="bind-devel is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654009" comment="bind-libs is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654010" comment="bind-libs is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654011" comment="bind-libs-lite is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654012" comment="bind-libs-lite is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654013" comment="bind-license is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654014" comment="bind-license is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654015" comment="bind-lite-devel is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654016" comment="bind-lite-devel is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654017" comment="bind-pkcs11 is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654018" comment="bind-pkcs11 is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654019" comment="bind-pkcs11-devel is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654020" comment="bind-pkcs11-devel is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654021" comment="bind-pkcs11-libs is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654022" comment="bind-pkcs11-libs is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654023" comment="bind-pkcs11-utils is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654024" comment="bind-pkcs11-utils is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654025" comment="bind-sdb is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654026" comment="bind-sdb is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654027" comment="bind-sdb-chroot is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654028" comment="bind-sdb-chroot is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654029" comment="bind-utils is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654030" comment="bind-utils is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654031" comment="python3-bind is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654032" comment="python3-bind is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654033" comment="bind-export-devel is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654034" comment="bind-export-devel is signed with the Oracle Linux 8 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202654654035" comment="bind-export-libs is earlier than 32:9.11.36-16.el8_10.14"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202654654036" comment="bind-export-libs is signed with the Oracle Linux 8 key"/>
</criteria>
</criteria>
</criteria>
</criteria>
</criteria>

</definition>
</definitions>
<!--
 ~~~~~~~~~~~~~~~~~~~~~   rpminfo tests   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<tests>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654001"  version="501" comment="Oracle Linux 8 is installed" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654001" />
<state state_ref="oval:com.oracle.elsa:ste:202654654002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654002"  version="501" comment="Oracle Linux arch is aarch64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654001" />
<state state_ref="oval:com.oracle.elsa:ste:202654654003" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654003"  version="501" comment="bind is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654002" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654004"  version="501" comment="bind is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654002" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654005"  version="501" comment="bind-chroot is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654003" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654006"  version="501" comment="bind-chroot is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654003" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654007"  version="501" comment="bind-devel is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654004" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654008"  version="501" comment="bind-devel is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654004" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654009"  version="501" comment="bind-libs is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654005" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654010"  version="501" comment="bind-libs is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654005" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654011"  version="501" comment="bind-libs-lite is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654006" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654012"  version="501" comment="bind-libs-lite is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654006" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654013"  version="501" comment="bind-license is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654007" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654014"  version="501" comment="bind-license is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654007" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654015"  version="501" comment="bind-lite-devel is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654008" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654016"  version="501" comment="bind-lite-devel is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654008" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654017"  version="501" comment="bind-pkcs11 is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654009" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654018"  version="501" comment="bind-pkcs11 is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654009" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654019"  version="501" comment="bind-pkcs11-devel is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654010" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654020"  version="501" comment="bind-pkcs11-devel is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654010" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654021"  version="501" comment="bind-pkcs11-libs is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654011" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654022"  version="501" comment="bind-pkcs11-libs is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654011" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654023"  version="501" comment="bind-pkcs11-utils is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654012" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654024"  version="501" comment="bind-pkcs11-utils is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654012" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654025"  version="501" comment="bind-sdb is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654013" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654026"  version="501" comment="bind-sdb is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654013" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654027"  version="501" comment="bind-sdb-chroot is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654014" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654028"  version="501" comment="bind-sdb-chroot is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654014" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654029"  version="501" comment="bind-utils is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654015" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654030"  version="501" comment="bind-utils is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654015" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654031"  version="501" comment="python3-bind is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654016" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654032"  version="501" comment="python3-bind is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654016" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654033"  version="501" comment="bind-export-devel is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654017" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654034"  version="501" comment="bind-export-devel is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654017" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654035"  version="501" comment="bind-export-libs is earlier than 32:9.11.36-16.el8_10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654018" />
<state state_ref="oval:com.oracle.elsa:ste:202654654004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654036"  version="501" comment="bind-export-libs is signed with the Oracle Linux 8 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654018" />
<state state_ref="oval:com.oracle.elsa:ste:202654654001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202654654037"  version="501" comment="Oracle Linux arch is x86_64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202654654001" />
<state state_ref="oval:com.oracle.elsa:ste:202654654005" />
</rpminfo_test>

</tests>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo objects   ~~~~~~~~~~~~~~~~~~~~ 
-->
<objects>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654018" version="501">
<name>bind-export-libs</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654009" version="501">
<name>bind-pkcs11</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654013" version="501">
<name>bind-sdb</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654003" version="501">
<name>bind-chroot</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654004" version="501">
<name>bind-devel</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654005" version="501">
<name>bind-libs</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654002" version="501">
<name>bind</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654001" version="501">
<name>oraclelinux-release</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654011" version="501">
<name>bind-pkcs11-libs</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654017" version="501">
<name>bind-export-devel</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654015" version="501">
<name>bind-utils</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654010" version="501">
<name>bind-pkcs11-devel</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654014" version="501">
<name>bind-sdb-chroot</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654007" version="501">
<name>bind-license</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654008" version="501">
<name>bind-lite-devel</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654012" version="501">
<name>bind-pkcs11-utils</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654016" version="501">
<name>python3-bind</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202654654006" version="501">
<name>bind-libs-lite</name>
</rpminfo_object>
</objects>
<states>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo states   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202654654001" version="501">
<signature_keyid operation="equals">82562ea9ad986da3</signature_keyid>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202654654002" version="501">
<version operation="pattern match">^8</version>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202654654003" version="501">
<arch operation="pattern match">aarch64</arch>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202654654004" version="501">
<evr datatype="evr_string" operation="less than">32:9.11.36-16.el8_10.14</evr>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202654654005" version="501">
<arch operation="pattern match">x86_64</arch>
</rpminfo_state>

</states>
</oval_definitions>
