-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 09:23:58 +0200
Source: krb5
Binary: krb5-admin-server krb5-admin-server-dbgsym krb5-gss-samples krb5-gss-samples-dbgsym krb5-k5tls krb5-k5tls-dbgsym krb5-kdc krb5-kdc-dbgsym krb5-kdc-ldap krb5-kdc-ldap-dbgsym krb5-kpropd krb5-kpropd-dbgsym krb5-multidev krb5-otp krb5-otp-dbgsym krb5-pkinit krb5-pkinit-dbgsym krb5-user krb5-user-dbgsym libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit12 libkadm5srv-mit12 libkdb5-10 libkrad-dev libkrad0 libkrb5-3 libkrb5-dbg libkrb5-dev libkrb5support0
Architecture: amd64
Version: 1.20.1-2+deb12u5
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-gss-samples - MIT Kerberos GSS Sample applications
 krb5-k5tls - TLS plugin for MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
 krb5-kpropd - MIT Kerberos key server (Slave KDC Support)
 krb5-multidev - development files for MIT Kerberos without Heimdal conflict
 krb5-otp   - OTP plugin for MIT Kerberos
 krb5-pkinit - PKINIT plugin for MIT Kerberos
 krb5-user  - basic programs to authenticate using MIT Kerberos
 libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
 libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
 libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
 libkadm5clnt-mit12 - MIT Kerberos runtime libraries - Administration Clients
 libkadm5srv-mit12 - MIT Kerberos runtime libraries - KDC and Admin Server
 libkdb5-10 - MIT Kerberos runtime libraries - Kerberos database
 libkrad-dev - MIT Kerberos RADIUS Library Development
 libkrad0   - MIT Kerberos runtime libraries - RADIUS library
 libkrb5-3  - MIT Kerberos runtime libraries
 libkrb5-dbg - debugging files for MIT Kerberos
 libkrb5-dev - headers and development libraries for MIT Kerberos
 libkrb5support0 - MIT Kerberos runtime libraries - Support library
Closes: 1135317
Changes:
 krb5 (1.20.1-2+deb12u5) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
     (Closes: #1135317)
Checksums-Sha1:
 3cff11350741646ad107865895797b5974b818ff 212900 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_amd64.deb
 0af05298bf7cf74079f647b2e585a3c7f6038c79 94072 krb5-admin-server_1.20.1-2+deb12u5_amd64.deb
 c3843d3bb8b492b73fc16e8fdd0f9760b4e5c8a8 39516 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_amd64.deb
 0ecb84d4b7becd031f2dc58ca9e7d58b62ac13b6 28944 krb5-gss-samples_1.20.1-2+deb12u5_amd64.deb
 a26b998428254036aab52be0a8280cf617ac24ed 19752 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_amd64.deb
 86c0101692ebdf61b2f53ecd936184c49aecb09c 19660 krb5-k5tls_1.20.1-2+deb12u5_amd64.deb
 2104a8f6a90ec49978e57bf93272f250f25c7dc4 456432 krb5-kdc-dbgsym_1.20.1-2+deb12u5_amd64.deb
 3ff5b7fdf1ab78130aeb9687921e41d2d233b5af 193088 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_amd64.deb
 b979886a9002e8467e136bb8cb29da3a20cfd787 88340 krb5-kdc-ldap_1.20.1-2+deb12u5_amd64.deb
 2f1edf4b9a3ff7cce4e1923652157035dbd5267e 181748 krb5-kdc_1.20.1-2+deb12u5_amd64.deb
 e346cbcd9b22fd3ab149a73f0d9d1baa4f2237f8 43524 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_amd64.deb
 14a7277f09632306b863524a8b35fa6c71278ba8 31960 krb5-kpropd_1.20.1-2+deb12u5_amd64.deb
 6f20d730605ed7235036707bcc44536e85110ce3 125716 krb5-multidev_1.20.1-2+deb12u5_amd64.deb
 bdb698787174707be7c4933e5de52019fcd158f8 29300 krb5-otp-dbgsym_1.20.1-2+deb12u5_amd64.deb
 c9eca86a07d64c0b53911c366a8af2627df62bec 22204 krb5-otp_1.20.1-2+deb12u5_amd64.deb
 9d125cf743646d0fee3e8d83165ddc7d872641d6 156536 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_amd64.deb
 c81721ad7653cd0b3509585292e18ed732ff1d09 57848 krb5-pkinit_1.20.1-2+deb12u5_amd64.deb
 ad6838dd8715c9b1d888accc2f7f21bff42a94ae 202088 krb5-user-dbgsym_1.20.1-2+deb12u5_amd64.deb
 93ce163cd8d4babe090a7a2522f2c775faf5bf79 119444 krb5-user_1.20.1-2+deb12u5_amd64.deb
 cec38adc19b89e2e85eba7aa10c5539e4253f339 16041 krb5_1.20.1-2+deb12u5_amd64-buildd.buildinfo
 f4094bc6b19b7a2477bea302700570be6d5eca6f 135168 libgssapi-krb5-2_1.20.1-2+deb12u5_amd64.deb
 4d577566884ade9ec2685d5990c42e2bfef3b1b3 58988 libgssrpc4_1.20.1-2+deb12u5_amd64.deb
 3b49d49e3a7fa00be863783e7d7b190e92b152b0 79712 libk5crypto3_1.20.1-2+deb12u5_amd64.deb
 96de14fdec50b29077ea529ee5ad77062038d18d 41752 libkadm5clnt-mit12_1.20.1-2+deb12u5_amd64.deb
 63815031968ce852c2e17ac61bb55b2b2d098cbc 53552 libkadm5srv-mit12_1.20.1-2+deb12u5_amd64.deb
 69cf643ad9ede41ebb6b4b0fc4cf04d0b86d0b32 41472 libkdb5-10_1.20.1-2+deb12u5_amd64.deb
 704acaa569520862ded54be518b85310dfb7ccf3 16004 libkrad-dev_1.20.1-2+deb12u5_amd64.deb
 825daa1d53585dc1da41396f5b6e26d4888d8a28 24948 libkrad0_1.20.1-2+deb12u5_amd64.deb
 8da744191e68d72ec5812b2707b0eb00520a7f46 332280 libkrb5-3_1.20.1-2+deb12u5_amd64.deb
 fc02f5198bc9d54436456a5da364b61dd11026e7 2182788 libkrb5-dbg_1.20.1-2+deb12u5_amd64.deb
 082a1f8983a9a1c286b215786c7465553e61036a 15504 libkrb5-dev_1.20.1-2+deb12u5_amd64.deb
 48201b9064a4be33618e9bc5fc95a7939837747e 33212 libkrb5support0_1.20.1-2+deb12u5_amd64.deb
Checksums-Sha256:
 46bd490a5d9c8bdf28be591552d32f5d9bfea2d344b8c2e08baf7d36150decdc 212900 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_amd64.deb
 6f7f8e908b04ce606a8d12df19c223d692ef50d62729ca196b131c3c68c613ff 94072 krb5-admin-server_1.20.1-2+deb12u5_amd64.deb
 145c91e674d419c2ae47bc7ab0c51c40757701ce24d306802fdc46eb664db83e 39516 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_amd64.deb
 83928dcdec0aefb093241bc50cef27c4b19361116c67536bb6150a745135d921 28944 krb5-gss-samples_1.20.1-2+deb12u5_amd64.deb
 745dd683c5942d908a9e9e77c55255cb20a12649b53123f03eb6bad78152495c 19752 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_amd64.deb
 1091b18a9a5e3dff986d188b9cf9b76acc67b7388c611afb8ebe41d3671c9a59 19660 krb5-k5tls_1.20.1-2+deb12u5_amd64.deb
 14c62ff1a89034b0fc6db87791ff9051fd474d75019a1db6bd4ede6f6eace7fd 456432 krb5-kdc-dbgsym_1.20.1-2+deb12u5_amd64.deb
 babd9841d4f2141addfae5ef4a0197e8a1afa3e20ab98cc43b1faa9bd335bd31 193088 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_amd64.deb
 31e7f4bf057dfda2ede4da0dfebc43f1b25ce09b188c060d831ab2a8f71db358 88340 krb5-kdc-ldap_1.20.1-2+deb12u5_amd64.deb
 7d4da7d00a9f3f4d7b08e7361b70e7d65630ab71b1af83a090841e919f4b3656 181748 krb5-kdc_1.20.1-2+deb12u5_amd64.deb
 67559348e070d969aa34b268bbd2e3246790ec3dac5db3820cc588a84dd555c0 43524 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_amd64.deb
 bf9a53c254dfd072469fcbb356cd7314a2cfe6b989013bc391d6ab0b02326f17 31960 krb5-kpropd_1.20.1-2+deb12u5_amd64.deb
 c47364fbcdffdc9efd239daef34e46b6ed817669d9ca587dcb99273a0860a91d 125716 krb5-multidev_1.20.1-2+deb12u5_amd64.deb
 13cf6725f3d4a502744690487080bf61e43c6cbeabbe6ece5a23fd3c1cc2e597 29300 krb5-otp-dbgsym_1.20.1-2+deb12u5_amd64.deb
 886af6911bf952c8fc5f88115e67b2bc0a717d8fc2f99a4ce15e4f9c0ca027d6 22204 krb5-otp_1.20.1-2+deb12u5_amd64.deb
 a6acec5a1161408672f8e519e5d490387f473b21996e2e8a8681a06a46bc991b 156536 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_amd64.deb
 0c67f6df7858c63c89883e1b16c7b135de43dc57d093f0cbad007a83a8ca3aa9 57848 krb5-pkinit_1.20.1-2+deb12u5_amd64.deb
 a4e13bcf40f572640e29319859df46cfc2864382b5dfed71d3159b1b1260df3b 202088 krb5-user-dbgsym_1.20.1-2+deb12u5_amd64.deb
 ca739146af87e47cae61a4c0e40f9e36ababea586318d5ba48d4c8be1b6fc90f 119444 krb5-user_1.20.1-2+deb12u5_amd64.deb
 dec101eec0ca741c1ef94329b521184616257217faa72d1ef1b5e874d5ef5b85 16041 krb5_1.20.1-2+deb12u5_amd64-buildd.buildinfo
 d8b87aea91b956b416c01a28c44ff6228315ae3b73de40acddac3dc5043607d2 135168 libgssapi-krb5-2_1.20.1-2+deb12u5_amd64.deb
 42227ed2c6fe45e4fbd125a32b2b2196a111489a0535f38c04d1b962ddb8f213 58988 libgssrpc4_1.20.1-2+deb12u5_amd64.deb
 7b6e47d15c5c9cdcd456137533d8308aeba608a54cec73b28bd59bfc4b54cf06 79712 libk5crypto3_1.20.1-2+deb12u5_amd64.deb
 8a67a257172a9cc5755925cb6b53e6ac30a042c875eaf530f96b20446549a23d 41752 libkadm5clnt-mit12_1.20.1-2+deb12u5_amd64.deb
 07e9b7de4c7065ef362eb7ecbd67569915cac43074b9d6a48d3e8c30b5017638 53552 libkadm5srv-mit12_1.20.1-2+deb12u5_amd64.deb
 225354f26df008a5e1559dbeb452d90c882b924b63885a658b54e86c634666eb 41472 libkdb5-10_1.20.1-2+deb12u5_amd64.deb
 516ff2f762e49bea60d774f3fee78ebc88c267ceb15c02bf45d68409e2ae8ede 16004 libkrad-dev_1.20.1-2+deb12u5_amd64.deb
 2cbe0cb77d67feb962703ee0b6c065618f2c6a3688fc8b9b597323bf6523b2fd 24948 libkrad0_1.20.1-2+deb12u5_amd64.deb
 c90801be09701af221b54dd502a59cb378b7284ff31e480738baca317d2f7653 332280 libkrb5-3_1.20.1-2+deb12u5_amd64.deb
 d0324c5d90de39a10b646ea9729d434af7b8b449a6a1f3123a2f3ea3ab144ccb 2182788 libkrb5-dbg_1.20.1-2+deb12u5_amd64.deb
 98703cfcafb6377414ca5a0de9a309c7b324337e6ecf8c86157a14b85cebcb66 15504 libkrb5-dev_1.20.1-2+deb12u5_amd64.deb
 8b9c05f2d8d461a10d657b118f572af5bf8fd6c8f93dcef81e852c5ab0f428ab 33212 libkrb5support0_1.20.1-2+deb12u5_amd64.deb
Files:
 f538771d987af899d2ed93126e127ded 212900 debug optional krb5-admin-server-dbgsym_1.20.1-2+deb12u5_amd64.deb
 bef3a29ede3592b55a644857159471a1 94072 net optional krb5-admin-server_1.20.1-2+deb12u5_amd64.deb
 1b48087b5a50c3c7b302066045a5effa 39516 debug optional krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_amd64.deb
 51afb8403dc5ee7d71aacd2e9c8b74fe 28944 net optional krb5-gss-samples_1.20.1-2+deb12u5_amd64.deb
 e64fe026cc1ca4e7b25be15e649ef6fa 19752 debug optional krb5-k5tls-dbgsym_1.20.1-2+deb12u5_amd64.deb
 b1ddbdaf53de98831f8bac4a774b5f4d 19660 net optional krb5-k5tls_1.20.1-2+deb12u5_amd64.deb
 bef867287ca1c483e88e47631b6b6aae 456432 debug optional krb5-kdc-dbgsym_1.20.1-2+deb12u5_amd64.deb
 231b2b71f88639a424e7534a78b93b71 193088 debug optional krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_amd64.deb
 778225505e28d90e3261fc4873cce304 88340 net optional krb5-kdc-ldap_1.20.1-2+deb12u5_amd64.deb
 c5230c51579d0f974f0f24e94d0339a5 181748 net optional krb5-kdc_1.20.1-2+deb12u5_amd64.deb
 d96fc8eef40fbd5c8fb0707b552f98ae 43524 debug optional krb5-kpropd-dbgsym_1.20.1-2+deb12u5_amd64.deb
 b0787a1a2dab2c6c4dfc1728fb07f19c 31960 net optional krb5-kpropd_1.20.1-2+deb12u5_amd64.deb
 171edc096f1139abc1c1e11c93cb5818 125716 libdevel optional krb5-multidev_1.20.1-2+deb12u5_amd64.deb
 d0f0220cc5bfb4fcbabfc89e4ed0372e 29300 debug optional krb5-otp-dbgsym_1.20.1-2+deb12u5_amd64.deb
 ee0f68a6dc67a298e027905e5a1cc370 22204 net optional krb5-otp_1.20.1-2+deb12u5_amd64.deb
 3bcb430900f39770f0df8fb8f17f809e 156536 debug optional krb5-pkinit-dbgsym_1.20.1-2+deb12u5_amd64.deb
 ad3598f3596c169cc3bc65952a4098e2 57848 net optional krb5-pkinit_1.20.1-2+deb12u5_amd64.deb
 63094245bff486c06f094204e220ec1e 202088 debug optional krb5-user-dbgsym_1.20.1-2+deb12u5_amd64.deb
 74bb5f9f3adacdf9c783b38be6e84017 119444 net optional krb5-user_1.20.1-2+deb12u5_amd64.deb
 772fd65b0070934e70f0c8c9c2339ade 16041 net optional krb5_1.20.1-2+deb12u5_amd64-buildd.buildinfo
 bb2171923ec47d48177a6d8d088bad0a 135168 libs optional libgssapi-krb5-2_1.20.1-2+deb12u5_amd64.deb
 2b85c0301fb7f89212e6271cf43a3319 58988 libs optional libgssrpc4_1.20.1-2+deb12u5_amd64.deb
 36559dec561e865510f50e96c89fec60 79712 libs optional libk5crypto3_1.20.1-2+deb12u5_amd64.deb
 1d7515bf8972cb57ca8a5ce719a993f0 41752 libs optional libkadm5clnt-mit12_1.20.1-2+deb12u5_amd64.deb
 9eafde073d03641e5cba1403a424e1de 53552 libs optional libkadm5srv-mit12_1.20.1-2+deb12u5_amd64.deb
 01f34269b957d141a7afd71b7ddf6777 41472 libs optional libkdb5-10_1.20.1-2+deb12u5_amd64.deb
 a3467277a76d6694c41ff3549069fe33 16004 libdevel optional libkrad-dev_1.20.1-2+deb12u5_amd64.deb
 bd7ef98c29cb6d5bd12eb72da8d4c70b 24948 libs optional libkrad0_1.20.1-2+deb12u5_amd64.deb
 4c36e65f6576495825ef27497cb3bfe3 332280 libs optional libkrb5-3_1.20.1-2+deb12u5_amd64.deb
 5769e1b24cfeb70365aff49d9bf4127a 2182788 debug optional libkrb5-dbg_1.20.1-2+deb12u5_amd64.deb
 dd228eaed13a5f93fa6d4279cb20be71 15504 libdevel optional libkrb5-dev_1.20.1-2+deb12u5_amd64.deb
 e349376ab7e3ee92ead2799ebd79796c 33212 libs optional libkrb5support0_1.20.1-2+deb12u5_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=cBwx
-----END PGP SIGNATURE-----