Linux · Oracle Linux · Security advisory · June 23, 2026

ELSA-2026-25049: Security update for 37 packages

ELSA-2026-25049, released June 23, 2026, fixes 6 CVEs across 37 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
6
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.2869
98th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 2 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
ldb-toolsol 90:4.23.5-10.el9_8
libldbol 90:4.23.5-10.el9_8
libldb-develol 90:4.23.5-10.el9_8
libnetapiol 90:4.23.5-10.el9_8
libnetapi-develol 90:4.23.5-10.el9_8
libsmbclientol 90:4.23.5-10.el9_8
libsmbclient-develol 90:4.23.5-10.el9_8
libwbclientol 90:4.23.5-10.el9_8
libwbclient-develol 90:4.23.5-10.el9_8
python3-ldbol 90:4.23.5-10.el9_8
python3-sambaol 90:4.23.5-10.el9_8
python3-samba-dcol 90:4.23.5-10.el9_8
python3-samba-testol 90:4.23.5-10.el9_8
sambaol 90:4.23.5-10.el9_8
samba-clientol 90:4.23.5-10.el9_8
samba-client-libsol 90:4.23.5-10.el9_8
samba-commonol 90:4.23.5-10.el9_8
samba-common-libsol 90:4.23.5-10.el9_8
samba-common-toolsol 90:4.23.5-10.el9_8
samba-dc-libsol 90:4.23.5-10.el9_8
samba-dcerpcol 90:4.23.5-10.el9_8
samba-develol 90:4.23.5-10.el9_8
samba-gpupdateol 90:4.23.5-10.el9_8
samba-krb5-printingol 90:4.23.5-10.el9_8
samba-ldb-ldap-modulesol 90:4.23.5-10.el9_8
samba-libsol 90:4.23.5-10.el9_8
samba-pidlol 90:4.23.5-10.el9_8
samba-testol 90:4.23.5-10.el9_8
samba-test-libsol 90:4.23.5-10.el9_8
samba-toolsol 90:4.23.5-10.el9_8
samba-usersharesol 90:4.23.5-10.el9_8
samba-vfs-iouringol 90:4.23.5-10.el9_8
samba-winbindol 90:4.23.5-10.el9_8
samba-winbind-clientsol 90:4.23.5-10.el9_8
samba-winbind-krb5-locatorol 90:4.23.5-10.el9_8
samba-winbind-modulesol 90:4.23.5-10.el9_8
samba-winexeol 90:4.23.5-10.el9_8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-4480 samba: A flaw was found in the Samba printing subsystem9.0 0.2869 None reported
Urgent CVE-2026-4408 samba: A flaw was found in Samba9.8 0.0250 None reported
High CVE-2026-2340 samba: A flaw was found in Samba’s vfs_worm module9.0 0.0095 None reported
High CVE-2026-1933 samba: A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes9.0 0.0086 None reported
High CVE-2026-40170 ngtcp2: ngtcp2 is a C implementation of the IETF QUIC protocol9.0 0.0078 None reported
High CVE-2026-3012 samba: A flaw was found in Samba’s certificate auto-enrollment Group Policy handling9.0 0.0026 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.