CLSA-2026-1788174820

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788174820
Upstream
Published
2026-08-31T11:13:51Z
Modified
2026-10-26T09:32:04Z
Summary
Fix CVE(s): CVE-2022-37966
Details
  • SECURITY UPDATE: Kerberos KDC elevation of privilege via weak RC4 session keys
    • debian/patches/CVE-2022-37966.patch: prefer AES over RC4 for Kerberos session keys by selecting the session key from the server's advertised session etypes, strip weak keys from the krbtgt account, leave UF_USE_DES_KEY_ONLY accounts without usable keys as upstream does, declare RC4 support explicitly on trust objects created by samba-tool (upstream 84c28b05a0a), and add "kdc default domain supported enctypes", "kdc supported enctypes" and "kdc force enable rc4 weak session keys" options
    • debian/patches/CVE-2022-37966.patch: free the newly added sdb_entry etypes/session_etypes members, the calloc'ed etypes->val array, and the krbtgt keys discarded when the key list is truncated to one (upstream 75a1beeea85, a97aad91878, 149d4364299), avoiding a per-request KDC memory leak
    • debian/patches/CVE-2022-37966-domain-trust-modify.patch: add the upstream "samba-tool domain trust modify" command (upstream d1999c15, same CVE-2022-37966 series) so an administrator has a supported CLI to repair a pre-existing RC4-only trust after the change above stopped assuming RC4 support on trust objects
    • CVE-2022-37966
References

Affected packages

TuxCare:Ubuntu:18.04
ctdb

Package

Name
ctdb
Purl
pkg:deb/tuxcare/ctdb?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
libnss-winbind

Package

Name
libnss-winbind
Purl
pkg:deb/tuxcare/libnss-winbind?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
libpam-winbind

Package

Name
libpam-winbind
Purl
pkg:deb/tuxcare/libpam-winbind?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
libparse-pidl-perl

Package

Name
libparse-pidl-perl
Purl
pkg:deb/tuxcare/libparse-pidl-perl?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
libsmbclient

Package

Name
libsmbclient
Purl
pkg:deb/tuxcare/libsmbclient?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
libsmbclient-dev

Package

Name
libsmbclient-dev
Purl
pkg:deb/tuxcare/libsmbclient-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
libwbclient-dev

Package

Name
libwbclient-dev
Purl
pkg:deb/tuxcare/libwbclient-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
libwbclient0

Package

Name
libwbclient0
Purl
pkg:deb/tuxcare/libwbclient0?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
python-samba

Package

Name
python-samba
Purl
pkg:deb/tuxcare/python-samba?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
registry-tools

Package

Name
registry-tools
Purl
pkg:deb/tuxcare/registry-tools?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
samba

Package

Name
samba
Purl
pkg:deb/tuxcare/samba?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
samba-common

Package

Name
samba-common
Purl
pkg:deb/tuxcare/samba-common?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
samba-common-bin

Package

Name
samba-common-bin
Purl
pkg:deb/tuxcare/samba-common-bin?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
samba-dev

Package

Name
samba-dev
Purl
pkg:deb/tuxcare/samba-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
samba-dsdb-modules

Package

Name
samba-dsdb-modules
Purl
pkg:deb/tuxcare/samba-dsdb-modules?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
samba-libs

Package

Name
samba-libs
Purl
pkg:deb/tuxcare/samba-libs?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
samba-testsuite

Package

Name
samba-testsuite
Purl
pkg:deb/tuxcare/samba-testsuite?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
samba-vfs-modules

Package

Name
samba-vfs-modules
Purl
pkg:deb/tuxcare/samba-vfs-modules?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
smbclient

Package

Name
smbclient
Purl
pkg:deb/tuxcare/smbclient?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"
winbind

Package

Name
winbind
Purl
pkg:deb/tuxcare/winbind?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788174820.json"