-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 May 2026 09:23:58 +0200 Source: krb5 Binary: krb5-admin-server krb5-admin-server-dbgsym krb5-gss-samples krb5-gss-samples-dbgsym krb5-k5tls krb5-k5tls-dbgsym krb5-kdc krb5-kdc-dbgsym krb5-kdc-ldap krb5-kdc-ldap-dbgsym krb5-kpropd krb5-kpropd-dbgsym krb5-multidev krb5-otp krb5-otp-dbgsym krb5-pkinit krb5-pkinit-dbgsym krb5-user krb5-user-dbgsym libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit12 libkadm5srv-mit12 libkdb5-10 libkrad-dev libkrad0 libkrb5-3 libkrb5-dbg libkrb5-dev libkrb5support0 Architecture: armhf Version: 1.20.1-2+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-05) Changed-By: Salvatore Bonaccorso Description: krb5-admin-server - MIT Kerberos master server (kadmind) krb5-gss-samples - MIT Kerberos GSS Sample applications krb5-k5tls - TLS plugin for MIT Kerberos krb5-kdc - MIT Kerberos key server (KDC) krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin krb5-kpropd - MIT Kerberos key server (Slave KDC Support) krb5-multidev - development files for MIT Kerberos without Heimdal conflict krb5-otp - OTP plugin for MIT Kerberos krb5-pkinit - PKINIT plugin for MIT Kerberos krb5-user - basic programs to authenticate using MIT Kerberos libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library libkadm5clnt-mit12 - MIT Kerberos runtime libraries - Administration Clients libkadm5srv-mit12 - MIT Kerberos runtime libraries - KDC and Admin Server libkdb5-10 - MIT Kerberos runtime libraries - Kerberos database libkrad-dev - MIT Kerberos RADIUS Library Development libkrad0 - MIT Kerberos runtime libraries - RADIUS library libkrb5-3 - MIT Kerberos runtime libraries libkrb5-dbg - debugging files for MIT Kerberos libkrb5-dev - headers and development libraries for MIT Kerberos libkrb5support0 - MIT Kerberos runtime libraries - Support library Closes: 1135317 Changes: krb5 (1.20.1-2+deb12u5) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) (Closes: #1135317) Checksums-Sha1: 4bc99cc1dd5d324c4d6489e5b6378f442cf35c5a 207220 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_armhf.deb cae0ed12dc0908c2165e44b9d50ed4a79929aa11 84988 krb5-admin-server_1.20.1-2+deb12u5_armhf.deb a3aa756ce42800d798dccf5c11910a0e01805574 37744 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_armhf.deb 5c0f761dffd73cf0ed69cfbfd0be9e5f6a1f841c 27200 krb5-gss-samples_1.20.1-2+deb12u5_armhf.deb 0ee41150bf18063fc6de3a9365d5b6fb2029a285 20284 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_armhf.deb ee34782ddb932bacfcd0fbe2735fec5a06fbbc64 18704 krb5-k5tls_1.20.1-2+deb12u5_armhf.deb f32aa6e204b7820890e2b8b9cebaad09f62be622 453316 krb5-kdc-dbgsym_1.20.1-2+deb12u5_armhf.deb b62eabbda9bfdf313a1164a599415f513c2d650b 190284 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_armhf.deb b913c4f1a8ea3bdaffd47a5901059bc2995ab077 80900 krb5-kdc-ldap_1.20.1-2+deb12u5_armhf.deb b0180783de2d89276bef805d6133d2912a744ba4 160252 krb5-kdc_1.20.1-2+deb12u5_armhf.deb e0a7eaeb83e370c37456da0e5c2d1f69163a1676 45272 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_armhf.deb 759a661fd11a82dfcf65e1ca7dac425d4722cf85 31380 krb5-kpropd_1.20.1-2+deb12u5_armhf.deb d636fe55034e0030098803c9ab4989ac0b16043f 125744 krb5-multidev_1.20.1-2+deb12u5_armhf.deb c1249ec86801516887f2fdcc587ffc47de170146 29396 krb5-otp-dbgsym_1.20.1-2+deb12u5_armhf.deb d80e208bf8ea6d23ca7045c99898e3660ee1b198 20668 krb5-otp_1.20.1-2+deb12u5_armhf.deb 5419ecda9f00aec8e4e1e8358a99b3298c7f94e2 152884 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_armhf.deb 6517ae2aaa6410ade260f458aa092bb30f0d3136 49652 krb5-pkinit_1.20.1-2+deb12u5_armhf.deb 1f0117a1e2515378fdd5509a041a72552559d0c9 197968 krb5-user-dbgsym_1.20.1-2+deb12u5_armhf.deb a6a0d9b395e3a7dce91eb0ff678657daa2378ce8 112900 krb5-user_1.20.1-2+deb12u5_armhf.deb 14931bc77b203dfba2ef6c5ac9b4ae73426fcf8d 15900 krb5_1.20.1-2+deb12u5_armhf-buildd.buildinfo 4792d35860850399c28ecd84f68213bd84dfac67 112040 libgssapi-krb5-2_1.20.1-2+deb12u5_armhf.deb 19b615b7fa47c63e0a39423ad224230f5b3374b0 51352 libgssrpc4_1.20.1-2+deb12u5_armhf.deb 6202ec30ddfd75de9381b984a130d80ee755cdf6 75360 libk5crypto3_1.20.1-2+deb12u5_armhf.deb a8f8476f3c7d18f666b23c14b763dbe923941998 36728 libkadm5clnt-mit12_1.20.1-2+deb12u5_armhf.deb 69b4e3139431f18aed54ebe6cd4db90baa1e1bf3 46616 libkadm5srv-mit12_1.20.1-2+deb12u5_armhf.deb 3fe7cc7fa7f29a90487b00e45bf8df094040ef7e 36368 libkdb5-10_1.20.1-2+deb12u5_armhf.deb 90ce67662393d04b537dfd37d3122fcd4a735fe9 15996 libkrad-dev_1.20.1-2+deb12u5_armhf.deb f685e7ed11912acbe0d168bd3dd517906a9e91da 22976 libkrad0_1.20.1-2+deb12u5_armhf.deb 7b33a0b2614c7e57fcc154932d783179cdfa9e1b 288188 libkrb5-3_1.20.1-2+deb12u5_armhf.deb 66a17029a1c5f7354e4d154ddfa21d0bf5d38d46 2156816 libkrb5-dbg_1.20.1-2+deb12u5_armhf.deb 845415de60e6710c944c5c73542df7ecd45ceeec 15504 libkrb5-dev_1.20.1-2+deb12u5_armhf.deb 8f6df8ed3af3669245cac39c548e523d3dc0d989 30216 libkrb5support0_1.20.1-2+deb12u5_armhf.deb Checksums-Sha256: be995832694980da20280c553ba75f2b164fdc78e8cf7090a0e2847beac8dbde 207220 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_armhf.deb 0f36c043de0365f9ba87bbf69352558883556f3d8700b711a9d2d458d6f0fe50 84988 krb5-admin-server_1.20.1-2+deb12u5_armhf.deb e440e1ddfeb0c0c035dbf3a2ac15797b7a949be1bfe3ea274584be6b5d8a5368 37744 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_armhf.deb dfcec51014b97f9a0fd008e44767863d19cd01fb3b9c6ca9f52b8ce99195f23b 27200 krb5-gss-samples_1.20.1-2+deb12u5_armhf.deb 9db72f8c8fa99afe3c47512f8a04adb78ee09d19862764d9a5e1606475adcf0c 20284 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_armhf.deb 839ff3cdac5b8f6f990f4907507b67cc1680602b08b1ee09340de371de9fa63c 18704 krb5-k5tls_1.20.1-2+deb12u5_armhf.deb d5a8176f75bd855815dc0d961afe1794dc897a88a49562760e629a73213b170a 453316 krb5-kdc-dbgsym_1.20.1-2+deb12u5_armhf.deb fb10bf0268cde8485ccb1f528302c4611cfc09e21e8e04e60c1135f3716d7f3c 190284 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_armhf.deb c0b5c336d7ea88b0aff578f41d1f920aba543df330b6ab29a10b0a02c4125b28 80900 krb5-kdc-ldap_1.20.1-2+deb12u5_armhf.deb 3867b6a707fbe5f7574e593ace3196d0dff02bdb3ac066c6cba460d71f7fea34 160252 krb5-kdc_1.20.1-2+deb12u5_armhf.deb b024dc4b607904eea78453839935ae9f2439b59b8bf15b4cea60188830af63ab 45272 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_armhf.deb f04cacd9d19e5a0c7e5147f1acd2021e4b79bd8a1f9e6bba9d30b657b0ab4168 31380 krb5-kpropd_1.20.1-2+deb12u5_armhf.deb c80295f4e4eff5fa4763ab541d4b80c5231e41e6d1649efdd6a20b26344af095 125744 krb5-multidev_1.20.1-2+deb12u5_armhf.deb a1a82c4a6fa6b7fd4dd342c1dc27728c4db3900ba0406ef5cd89d7e5f258f11c 29396 krb5-otp-dbgsym_1.20.1-2+deb12u5_armhf.deb 9bd01c4f96a6b2fa30efe42342606f13455aa5df6e6d34e1d4baa81750b6b993 20668 krb5-otp_1.20.1-2+deb12u5_armhf.deb ef83914d3ce66a18850bfe6ac64959d8cad4301fa8e8e9a759efe93afb527124 152884 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_armhf.deb b8f2da39947c75a4e4d509e8cf1f7bf725f2e16d208023e0b978c26f745ff818 49652 krb5-pkinit_1.20.1-2+deb12u5_armhf.deb a4a6d0fafe838c1bed12ca7a7905a706b33b5342d2ad3c7136afed9378a0dfba 197968 krb5-user-dbgsym_1.20.1-2+deb12u5_armhf.deb 214ee51d6163a49f732a7f16f40f219e02bcdebd63c11caafd0feb7ea31330bf 112900 krb5-user_1.20.1-2+deb12u5_armhf.deb d42b56e1eb5d4519a401c30b42aee3b8a5237140385367e5782fd9ef1da93eb5 15900 krb5_1.20.1-2+deb12u5_armhf-buildd.buildinfo e3f674af80e03b04a257eec5d4cb5baf680488b95f9f6eff35a151c1594432b0 112040 libgssapi-krb5-2_1.20.1-2+deb12u5_armhf.deb f08a7ac356e54c519eda1e43ef66c2ae3b740936feb767c3a55b3f04ecf2d2f8 51352 libgssrpc4_1.20.1-2+deb12u5_armhf.deb be0457040c22c67f765767f63dc5531f1629f8f4914bcc8992b1edea17f493d0 75360 libk5crypto3_1.20.1-2+deb12u5_armhf.deb 9f3a41fd4f58fa25d08d1c8633c4e7364f23f8b05058ccad2f9f199799020216 36728 libkadm5clnt-mit12_1.20.1-2+deb12u5_armhf.deb 5f07fdc72bf3929f06a00896c38755d27a1069e153645f9c0060a6e9e4f18fd0 46616 libkadm5srv-mit12_1.20.1-2+deb12u5_armhf.deb d1e4db609d0db034030e803819bad7866f446df85f0ca1edbd5b4e458188c52c 36368 libkdb5-10_1.20.1-2+deb12u5_armhf.deb 821289b22059a93fedc62ccf55597e72cd7986f834968d3cbc86422fd47d64be 15996 libkrad-dev_1.20.1-2+deb12u5_armhf.deb 9787491f935b4b187d583873d506810862aef6b4af249f8d2d056c7fb0c21fbc 22976 libkrad0_1.20.1-2+deb12u5_armhf.deb 3dac821ed96dd0bfcafe9a1643f81ada7bcae30f64a3b5069fd1322886e6d478 288188 libkrb5-3_1.20.1-2+deb12u5_armhf.deb 1fddceff4970db38e665781bcea1c04eee906edfa84ffe6738723be4c8b1a69c 2156816 libkrb5-dbg_1.20.1-2+deb12u5_armhf.deb aef8879f49b604b2b0a7dc3244a42a76e0c86f0d8d132bcf0f79d898af82ebf4 15504 libkrb5-dev_1.20.1-2+deb12u5_armhf.deb 85a53b81203d0773809a1a76c20bd92fc2aee7ae063592a8ed8e6499b86706fa 30216 libkrb5support0_1.20.1-2+deb12u5_armhf.deb Files: feb5bffb43cf0171259676dd5e9952f2 207220 debug optional krb5-admin-server-dbgsym_1.20.1-2+deb12u5_armhf.deb debdf58e48308336f8d378a5f5049761 84988 net optional krb5-admin-server_1.20.1-2+deb12u5_armhf.deb 16f0b1510e375df566fc5df1a25d9433 37744 debug optional krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_armhf.deb 5f69628fc5f76fc253336c5ddd11ef7f 27200 net optional krb5-gss-samples_1.20.1-2+deb12u5_armhf.deb f21d662a7954a2b7394866f15de19bdb 20284 debug optional krb5-k5tls-dbgsym_1.20.1-2+deb12u5_armhf.deb 2f0dd6c20f4d3dc774a6dbd523edba45 18704 net optional krb5-k5tls_1.20.1-2+deb12u5_armhf.deb dea445922cb2bbc07a3c77236fc83d92 453316 debug optional krb5-kdc-dbgsym_1.20.1-2+deb12u5_armhf.deb 3ec366dd7d610f9942b7c1526b196182 190284 debug optional krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_armhf.deb 79b6545ce141356d3da111cd01cee0f0 80900 net optional krb5-kdc-ldap_1.20.1-2+deb12u5_armhf.deb e716a82d370165a768e97a731d947de1 160252 net optional krb5-kdc_1.20.1-2+deb12u5_armhf.deb 29e638291d8fc91c6ee900aeb71a0d57 45272 debug optional krb5-kpropd-dbgsym_1.20.1-2+deb12u5_armhf.deb b13017e7c295976bf6f85bbb1292ad71 31380 net optional krb5-kpropd_1.20.1-2+deb12u5_armhf.deb 75a9010281fbf4960918ebc742e973f7 125744 libdevel optional krb5-multidev_1.20.1-2+deb12u5_armhf.deb a5b9757a55a83dda30a9346587080540 29396 debug optional krb5-otp-dbgsym_1.20.1-2+deb12u5_armhf.deb 04b71e93734167863acc1243f11a9efa 20668 net optional krb5-otp_1.20.1-2+deb12u5_armhf.deb 284685f5b396754a27d3599bd49d4cec 152884 debug optional krb5-pkinit-dbgsym_1.20.1-2+deb12u5_armhf.deb 48b82487d88fd2bff32a1daad1e17344 49652 net optional krb5-pkinit_1.20.1-2+deb12u5_armhf.deb ea8bd1b953b5faf50a0fbdb4114a3655 197968 debug optional krb5-user-dbgsym_1.20.1-2+deb12u5_armhf.deb 1a63723dc3e9cfb05067ad57e3538353 112900 net optional krb5-user_1.20.1-2+deb12u5_armhf.deb 7c7bf93032212d80c901ec9730efe399 15900 net optional krb5_1.20.1-2+deb12u5_armhf-buildd.buildinfo 6b6b498cf1585099e14130bf578fa3ea 112040 libs optional libgssapi-krb5-2_1.20.1-2+deb12u5_armhf.deb 65af9cbd236b00a80e1595f1cfc09fe9 51352 libs optional libgssrpc4_1.20.1-2+deb12u5_armhf.deb 7a1f9c6c4c02fec4c60373c050ec485f 75360 libs optional libk5crypto3_1.20.1-2+deb12u5_armhf.deb 54458feffb9591a9c9215815bc680924 36728 libs optional libkadm5clnt-mit12_1.20.1-2+deb12u5_armhf.deb d0f4ea9eda505cdd895fff3eff32831e 46616 libs optional libkadm5srv-mit12_1.20.1-2+deb12u5_armhf.deb 35589c1006358e1db048cc5e1fd13b48 36368 libs optional libkdb5-10_1.20.1-2+deb12u5_armhf.deb a215471b87dc4192c4dbc4af384d926e 15996 libdevel optional libkrad-dev_1.20.1-2+deb12u5_armhf.deb a48b09562baf2e410da2b3376001e60d 22976 libs optional libkrad0_1.20.1-2+deb12u5_armhf.deb 0b8990e3555822194902a4e48ab90cc8 288188 libs optional libkrb5-3_1.20.1-2+deb12u5_armhf.deb ca7212425bc136e8dc356e21a10f4e69 2156816 debug optional libkrb5-dbg_1.20.1-2+deb12u5_armhf.deb dd17ba8cdd4c07b4d7009edc0fcd4bfd 15504 libdevel optional libkrb5-dev_1.20.1-2+deb12u5_armhf.deb dde07e32b3e9f3901d7c37538c2753c4 30216 libs optional libkrb5support0_1.20.1-2+deb12u5_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmoAioIACgkQnwznazfj XTr9qhAA32MUKdVoqzNwO6kP9mxrAwe5rCqPKuPcQU3ZNiU/N5pWSuMnekdW8ohm oX8sZyMCSb0e07nsNXcEFrYvrFE7JCSA4DNalMQr4IEJ6dS7IXr/ABbXX9FySFIU VAvDP5lBe+El+LwuKxJ1EhERFcKZ8hwCeXQLAsA3A3i1auV36tnbgbq+4ycJNcWR ftHv32wK+shLCe9s0pWfKPhVT8M4wPOY3I/3YMM53q1Cwqygyju6yoKzMPA/iL8L ALjHf1BLpkHc5KZcQwF4w9Uy+JUQooXlw+MEkUHto0A4lJgQaWbVDoacyLZqS+zC dGv0QJtWbbjOm3LfHRYpTlFCaLxEgfKAc1klj+sB40u6YLkk0H2/c7s05dxaX/F3 m7kaG9Hb8LqfoE/1be7cI4pVYyOOjbTSK5vHiFZDgK5ptdjpHdyopiZrwSUYY+Q6 3uUWkOAH58oDhNL+i5oHiuc341970fDW6gViEzNHzSzSk0SdB0qTRWxWygOJS3yU P72iVX3VRnfOuPLc8RU94iy4hgHqmbNwlRfGGVizG9wyuZjeglbI1pIf2f4bYGcx I5xwhWH113g5T65QaaCVnG7S08HckICZm0JViKZ4lSk8nBpyaIEpBM7/YiMPo6WQ u9a9NrOq3qf9adaQOeL3a2dfwJdJreox2I4rAERs2cjc3bnQdQo= =H7Gb -----END PGP SIGNATURE-----