{"id":"CLSA-2026-1788174820","summary":"Fix CVE(s): CVE-2022-37966","details":"   * SECURITY UPDATE: Kerberos KDC elevation of privilege via weak RC4 session\n     keys\n     - debian/patches/CVE-2022-37966.patch: prefer AES over RC4 for Kerberos\n       session keys by selecting the session key from the server's advertised\n       session etypes, strip weak keys from the krbtgt account, leave\n       UF_USE_DES_KEY_ONLY accounts without usable keys as upstream does,\n       declare RC4 support explicitly on trust objects created by samba-tool\n       (upstream 84c28b05a0a), and add \"kdc default domain supported\n       enctypes\", \"kdc supported enctypes\" and \"kdc force enable rc4 weak\n       session keys\" options\n     - debian/patches/CVE-2022-37966.patch: free the newly added sdb_entry\n       etypes/session_etypes members, the calloc'ed etypes-\u003eval array, and\n       the krbtgt keys discarded when the key list is truncated to one\n       (upstream 75a1beeea85, a97aad91878, 149d4364299), avoiding a\n       per-request KDC memory leak\n     - debian/patches/CVE-2022-37966-domain-trust-modify.patch: add the\n       upstream \"samba-tool domain trust modify\" command (upstream d1999c15,\n       same CVE-2022-37966 series) so an administrator has a supported CLI to\n       repair a pre-existing RC4-only trust after the change above stopped\n       assuming RC4 support on trust objects\n     - CVE-2022-37966","modified":"2026-10-26T09:32:04.018889983Z","published":"2026-08-31T11:13:51Z","upstream":["CVE-2022-37966"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1788174820.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37966"}],"affected":[{"package":{"name":"ctdb","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/ctdb?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"libnss-winbind","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libnss-winbind?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"libpam-winbind","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpam-winbind?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"libparse-pidl-perl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libparse-pidl-perl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"libsmbclient","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libsmbclient?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"libsmbclient-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libsmbclient-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"libwbclient-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libwbclient-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"libwbclient0","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libwbclient0?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"python-samba","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/python-samba?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"registry-tools","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/registry-tools?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"samba","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"samba-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"samba-common-bin","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-common-bin?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"samba-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"samba-dsdb-modules","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-dsdb-modules?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"samba-libs","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-libs?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"samba-testsuite","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-testsuite?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"samba-vfs-modules","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-vfs-modules?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"smbclient","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/smbclient?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}},{"package":{"name":"winbind","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/winbind?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"}}],"schema_version":"1.9.0"}