[CLSA-2026:1786494875] Fix CVE(s): CVE-2022-38023
Type:
security
Severity:
Important
Release date:
2026-08-12 00:34:46 UTC
Description:
* SECURITY UPDATE: netlogon secure channel allowed RC4/HMAC-MD5 downgrade and unsealed (unencrypted) use, permitting man-in-the-middle attacks - debian/patches/CVE-2022-38023.patch: change "reject md5 clients" and "reject md5 servers" defaults to yes, deprecate "allow nt4 crypto" and "reject md5 clients", add "server schannel require seal" (default yes) and require DCERPC_AUTH_LEVEL_PRIVACY in the source3 and source4 netlogon servers including all netr_LogonSamLogon* variants, defer the ServerAuthenticate3 downgrade check until the account is found in the SAM so that "server reject md5 schannel:COMPUTERACCOUNT" and "allow nt4 crypto:COMPUTERACCOUNT" exceptions apply - CVE-2022-38023
CVEs fixed:
Updated packages:
  • ctdb_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:10fd683803f899b1fba75ba2cc7f2a9f6a0ce22a
  • libnss-winbind_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:e7530b8d68ec04c213e325dd3e6dcb17ef4efbe6
  • libpam-winbind_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:1b8568f3b23a45552e6451a071e5d8b87264a706
  • libparse-pidl-perl_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:18f7cf2025ee22c71c2ee57dc87d1440c9161c6b
  • libsmbclient_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:fe1c13f91d565236f315220e904fa9c0f9df761f
  • libsmbclient-dev_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:b62e6744fe6a5136bc84e1bfc3233164a127d6e3
  • libwbclient-dev_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:3a6f15016e886ca7b06843f28556832523c239c4
  • libwbclient0_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:067c19e33260826b8e0eb6fb519e7bceb864deea
  • python-samba_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:54779fe8a98ae0b0eb4e1be3aea9de5bac0828dc
  • registry-tools_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:d8dc407244bdb817a10b38cd6fc18a45026dd610
  • samba_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:3ea6776867b42d25cd5195973bce391f68fc682a
  • samba-common_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_all.deb
    sha:8433464fb831e6bbf0df545a11eb7b5aa35d93db
  • samba-common-bin_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:524213bcb486fe9c45b4a18b526194b0a9f2513e
  • samba-dev_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:ec8d95d277d922bec605978888b210984da48877
  • samba-dsdb-modules_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:3296e071fff793b5d13b4604d39df56bd71efbc9
  • samba-libs_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:7cd6a23f999e277b614094715de01e853b9a9e80
  • samba-testsuite_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:29a6542491310c8f464e8dcde123b71c3dc641b0
  • samba-vfs-modules_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:a4e547ef13251c7adce85e540d09a75abd68713f
  • smbclient_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:01863102a43f3a61e336d18e0def9bd570e467a7
  • winbind_4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els8_amd64.deb
    sha:7eb1a30ee97e814639040f95ac05fbab91a58611
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.