diff options
| author | Stefan Metzmacher <metze@samba.org> | 2022-11-23 15:20:40 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2022-12-14 00:48:49 +0100 |
| commit | 153e4a391420f1d492d7af3a3cfb71dabf98e08f (patch) | |
| tree | 9991a0e362f52fece381593b5bf2d78082df7036 | |
| parent | ac6563e70ade2152a82e56f0b0ff2c43af084946 (diff) | |
| download | samba-153e4a391420f1d492d7af3a3cfb71dabf98e08f.tar.gz | |
CVE-2022-37966 s3:libads: no longer reference des encryption types
We no longer have support for des encryption types in the kerberos
libraries anyway.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit a683507e560a499336c50b88abcd853d49618bf4)
| -rw-r--r-- | source3/libads/kerberos.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source3/libads/kerberos.c b/source3/libads/kerberos.c index a4a5e040c17..d0b82af22b7 100644 --- a/source3/libads/kerberos.c +++ b/source3/libads/kerberos.c @@ -665,7 +665,7 @@ static char *get_enctypes(TALLOC_CTX *mem_ctx) if (lp_kerberos_encryption_types() == KERBEROS_ETYPES_ALL || lp_kerberos_encryption_types() == KERBEROS_ETYPES_LEGACY) { - legacy_enctypes = "arcfour-hmac-md5 des-cbc-crc des-cbc-md5"; + legacy_enctypes = "arcfour-hmac-md5"; } enctypes = talloc_asprintf(mem_ctx, "\tdefault_etypes = %s %s\n", |