-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 09:23:58 +0200
Source: krb5
Binary: krb5-admin-server krb5-admin-server-dbgsym krb5-gss-samples krb5-gss-samples-dbgsym krb5-k5tls krb5-k5tls-dbgsym krb5-kdc krb5-kdc-dbgsym krb5-kdc-ldap krb5-kdc-ldap-dbgsym krb5-kpropd krb5-kpropd-dbgsym krb5-multidev krb5-otp krb5-otp-dbgsym krb5-pkinit krb5-pkinit-dbgsym krb5-user krb5-user-dbgsym libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit12 libkadm5srv-mit12 libkdb5-10 libkrad-dev libkrad0 libkrb5-3 libkrb5-dbg libkrb5-dev libkrb5support0
Architecture: arm64
Version: 1.20.1-2+deb12u5
Distribution: bookworm-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-gss-samples - MIT Kerberos GSS Sample applications
 krb5-k5tls - TLS plugin for MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
 krb5-kpropd - MIT Kerberos key server (Slave KDC Support)
 krb5-multidev - development files for MIT Kerberos without Heimdal conflict
 krb5-otp   - OTP plugin for MIT Kerberos
 krb5-pkinit - PKINIT plugin for MIT Kerberos
 krb5-user  - basic programs to authenticate using MIT Kerberos
 libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
 libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
 libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
 libkadm5clnt-mit12 - MIT Kerberos runtime libraries - Administration Clients
 libkadm5srv-mit12 - MIT Kerberos runtime libraries - KDC and Admin Server
 libkdb5-10 - MIT Kerberos runtime libraries - Kerberos database
 libkrad-dev - MIT Kerberos RADIUS Library Development
 libkrad0   - MIT Kerberos runtime libraries - RADIUS library
 libkrb5-3  - MIT Kerberos runtime libraries
 libkrb5-dbg - debugging files for MIT Kerberos
 libkrb5-dev - headers and development libraries for MIT Kerberos
 libkrb5support0 - MIT Kerberos runtime libraries - Support library
Closes: 1135317
Changes:
 krb5 (1.20.1-2+deb12u5) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
     (Closes: #1135317)
Checksums-Sha1:
 305cf3516f6c8739d1b68d5b6799f3d5025fd796 210984 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_arm64.deb
 ce1237dd53215cd538d9365a21e2e4433f65a378 89520 krb5-admin-server_1.20.1-2+deb12u5_arm64.deb
 d2b71b98a8d39ccf19c16fbd89c411e335e39a5e 39368 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_arm64.deb
 8dbce2666a305f2812e57123c1622c22d073760c 28156 krb5-gss-samples_1.20.1-2+deb12u5_arm64.deb
 4d74d3a53c2fff6c70734ab51009ea184bafe35f 20164 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_arm64.deb
 8b230f918d824b9dedcdf57d7d0b5d1f6f19ab19 19768 krb5-k5tls_1.20.1-2+deb12u5_arm64.deb
 07e396ab1a5e2fd877d2b9c484887258877bb74e 446984 krb5-kdc-dbgsym_1.20.1-2+deb12u5_arm64.deb
 eec3120575fde380bda6dd77226f21e0c83595aa 191284 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_arm64.deb
 aa8574adc1b02e05cfefab8e5e1aab5ac62d68b0 85544 krb5-kdc-ldap_1.20.1-2+deb12u5_arm64.deb
 d2db4f1ef159cc1a665ae0a8e895e3bc8e57b7e2 172960 krb5-kdc_1.20.1-2+deb12u5_arm64.deb
 81c5d56f8a0526d82e274791a6e63426f4a31266 43932 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_arm64.deb
 412b22891646f42b09e87494c296c579b0a0dd48 31216 krb5-kpropd_1.20.1-2+deb12u5_arm64.deb
 a8cd135098218c72b0926fa7a5c08a87eb4658b1 125724 krb5-multidev_1.20.1-2+deb12u5_arm64.deb
 0e547c3d70f353d12b5b440451b4656f62e23a98 29068 krb5-otp-dbgsym_1.20.1-2+deb12u5_arm64.deb
 b37759af026528bd2520d5fd93142b16b7f98f7c 21788 krb5-otp_1.20.1-2+deb12u5_arm64.deb
 0d6e3e1f7ae82a7ccac5b1a9f00cd5e4a27d0d17 156060 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_arm64.deb
 de751334a95cc60c2bf1563e8a41de2525362050 54516 krb5-pkinit_1.20.1-2+deb12u5_arm64.deb
 bc219499f12e34868b364c4d4c0903ed3acbdd25 202360 krb5-user-dbgsym_1.20.1-2+deb12u5_arm64.deb
 d72ef982ebe26070f78344759648ed2a6dc64872 116332 krb5-user_1.20.1-2+deb12u5_arm64.deb
 4d2bcc653388dae6f9eb073ad4221b47dd3cec8a 16056 krb5_1.20.1-2+deb12u5_arm64-buildd.buildinfo
 e3da36737e3a362369d906ec57aaffe3f4924c06 124152 libgssapi-krb5-2_1.20.1-2+deb12u5_arm64.deb
 a6bfb0a5b32e9e138c400bcf163747d79444fffe 55976 libgssrpc4_1.20.1-2+deb12u5_arm64.deb
 bbecda7782da1a7c69338a83b5fd92620c9b3348 79880 libk5crypto3_1.20.1-2+deb12u5_arm64.deb
 78b64884c1ac1a41e2741376143beb96be4204c4 40060 libkadm5clnt-mit12_1.20.1-2+deb12u5_arm64.deb
 574fde302ca6cbc693ec8eae4dc34edd8100b0b4 51912 libkadm5srv-mit12_1.20.1-2+deb12u5_arm64.deb
 36a13edadf2942674c63f5d79d16edb6582cce22 40324 libkdb5-10_1.20.1-2+deb12u5_arm64.deb
 25bdcc892ffffa90664c807f2cc40cbdf9030c2f 15996 libkrad-dev_1.20.1-2+deb12u5_arm64.deb
 855303e97e2765431d75c69f7cd1cd5e8f3887d7 24528 libkrad0_1.20.1-2+deb12u5_arm64.deb
 7ed1b5389aeedcf4ef89f26994f36416be711e16 315528 libkrb5-3_1.20.1-2+deb12u5_arm64.deb
 b7f6787e55851ebfb0207b9f4a21dca335e480c4 2137636 libkrb5-dbg_1.20.1-2+deb12u5_arm64.deb
 eda5151c839f2b1812329cf2915676e5dad9b71a 15520 libkrb5-dev_1.20.1-2+deb12u5_arm64.deb
 385f6df6886a1a8b3bc0a19ae4bdab086dd14213 32592 libkrb5support0_1.20.1-2+deb12u5_arm64.deb
Checksums-Sha256:
 f2fa73a08f0e69ce1429df593a5ccc3e73a253c78ccb311ff12b6791c999d7d8 210984 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_arm64.deb
 277515117f0e69e28fd4e1f77e1f31eed15537cac669d3f3e3c5d9298df1bd66 89520 krb5-admin-server_1.20.1-2+deb12u5_arm64.deb
 ee51347ba8799c9175736fcd98448ab17fe419cad3a88be4b68e46de8d56e9c5 39368 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_arm64.deb
 6a8faf3ede38f2255489fbf05f1b5e90bf5e2c7c0f6b7c62ba30827eb07b5e23 28156 krb5-gss-samples_1.20.1-2+deb12u5_arm64.deb
 36462deac83828abaf988a265a93815a2463e2405a1adefdc6e7de48f91fc344 20164 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_arm64.deb
 bc3974682f258d142bdc5e9dfb495424c7d288d6a5b7a8024027afe42a9338bd 19768 krb5-k5tls_1.20.1-2+deb12u5_arm64.deb
 31d1729746802a4195f97703453bb817e1dfb5d8ec8f8aaa8276e971e0815095 446984 krb5-kdc-dbgsym_1.20.1-2+deb12u5_arm64.deb
 41ed0e26232ec7eac9b0ecc64596004e87f88da31346e4449e4a4d3f00a03d07 191284 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_arm64.deb
 4d7ee143660d9946f4645c1e79b1a9593143bb5a5796d213c841858b8b8de05f 85544 krb5-kdc-ldap_1.20.1-2+deb12u5_arm64.deb
 53b3edf37c159b817b84a7b3838efd97bd2eee3f2ddb544deab29b61a1d48bf2 172960 krb5-kdc_1.20.1-2+deb12u5_arm64.deb
 5f6acaeb13a33c64f7bc9e50da9cfd72e1685e5ecc32ce3160a4a3a3bf0f7d09 43932 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_arm64.deb
 b6902ff9827feac9ee8d35f1b215f1fde0ec86e7cabc33a8c35f7065217febd1 31216 krb5-kpropd_1.20.1-2+deb12u5_arm64.deb
 290a4c3a76f71d67ccabf23cb9881ba6bcd9bc332562d746d15da0f32e51aa36 125724 krb5-multidev_1.20.1-2+deb12u5_arm64.deb
 f6809845a76b8835a57d16cbdaf5aaba0a5bc6154358a96145023115a7e6a478 29068 krb5-otp-dbgsym_1.20.1-2+deb12u5_arm64.deb
 5872bab1bd539a0dc2eef87c927cdceb1f7fcb867f089eea8889d93011872324 21788 krb5-otp_1.20.1-2+deb12u5_arm64.deb
 2de12e3cedb420a4dd61687490871ab45f62b2e98d94a4d2f1239a5a9676c660 156060 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_arm64.deb
 bc74459d8e624e44a4452d7f925ef6a9d00043249bdf6fd5f594cbd365a33dfc 54516 krb5-pkinit_1.20.1-2+deb12u5_arm64.deb
 23e00ab3dc90759612ff773ee042418d84747c45678e5566fc0e003a77d6e213 202360 krb5-user-dbgsym_1.20.1-2+deb12u5_arm64.deb
 fffc432b30ea13b31634bcb706471afe7970c6908aba46904452971771920727 116332 krb5-user_1.20.1-2+deb12u5_arm64.deb
 07345b4902eae88d569041e61807ac545e8a24d63a33624b7f247e00494dfb3a 16056 krb5_1.20.1-2+deb12u5_arm64-buildd.buildinfo
 a00678963f692a929312968f19b77a61a8fc0011690d7dc909a8a2c4810fc7b3 124152 libgssapi-krb5-2_1.20.1-2+deb12u5_arm64.deb
 23aac6800190a186fbb607c1bb3e15276c3f6d7c1e8f9d99ef32796fcb9da784 55976 libgssrpc4_1.20.1-2+deb12u5_arm64.deb
 8ae2c31cde0b3e6f80c573a495b0f90bf6d9efb4455d900728278bb54d9092e5 79880 libk5crypto3_1.20.1-2+deb12u5_arm64.deb
 8cf5c736444dcc21317f22298d2915035039d16c27f97b0e4c2d2cb9d4e513df 40060 libkadm5clnt-mit12_1.20.1-2+deb12u5_arm64.deb
 df0e8bf4f41568f6ae4e65f6eaf08531087579d9f9830aa9cf25068ba46c7b13 51912 libkadm5srv-mit12_1.20.1-2+deb12u5_arm64.deb
 5c82d3e87da00515effe92cc1b965760ab58bcda7fcb0527b2f1495ad0297e28 40324 libkdb5-10_1.20.1-2+deb12u5_arm64.deb
 25f2ec949a4102311a9077b4a341197d8aee6c99a6b3342e0ab0ec91a4ce5657 15996 libkrad-dev_1.20.1-2+deb12u5_arm64.deb
 9791d2b71368e4f86e512ba68232e6615f77012e99637beaaee63299a2753947 24528 libkrad0_1.20.1-2+deb12u5_arm64.deb
 c3c7227f5db903a7a8b8936d47d1d79643edcda36365c4c992e1a96bcc2d4c7e 315528 libkrb5-3_1.20.1-2+deb12u5_arm64.deb
 cd73495e78b1eecd368f782eb59db64ee55831a234568d9151b03ced977d1828 2137636 libkrb5-dbg_1.20.1-2+deb12u5_arm64.deb
 62f5fa17ed9abfe6d9a698ac1bdb970f4dab5812061e19a379724c098956fa8b 15520 libkrb5-dev_1.20.1-2+deb12u5_arm64.deb
 3043fd4a54b945a1b503170749527f825dcfc7add2f8bf5abb4a329deeb48f4a 32592 libkrb5support0_1.20.1-2+deb12u5_arm64.deb
Files:
 9a0397a1bfb894a65f419d428a3ae527 210984 debug optional krb5-admin-server-dbgsym_1.20.1-2+deb12u5_arm64.deb
 266ef2b0fd2178e4c06385ca0fb1e2b5 89520 net optional krb5-admin-server_1.20.1-2+deb12u5_arm64.deb
 e8ebc21d8a731b89539a71cbba4c5ba1 39368 debug optional krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_arm64.deb
 0430afcb7d5c6e1f95373497e6f589c5 28156 net optional krb5-gss-samples_1.20.1-2+deb12u5_arm64.deb
 15742ab67aa9542c608fc3f099b24020 20164 debug optional krb5-k5tls-dbgsym_1.20.1-2+deb12u5_arm64.deb
 97325e77366268693f0b85ca9ff0e470 19768 net optional krb5-k5tls_1.20.1-2+deb12u5_arm64.deb
 acb75f5a6c4e53f6fd68baccb66d8baf 446984 debug optional krb5-kdc-dbgsym_1.20.1-2+deb12u5_arm64.deb
 6766b7e0b37b115f36f7261d79c046b0 191284 debug optional krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_arm64.deb
 72384b8e9cc6a18923c0d37d0a680ef3 85544 net optional krb5-kdc-ldap_1.20.1-2+deb12u5_arm64.deb
 c48b3f79046dc3bd13d757d79e97f16d 172960 net optional krb5-kdc_1.20.1-2+deb12u5_arm64.deb
 90ea8dfffc555de7144c0558953ebf86 43932 debug optional krb5-kpropd-dbgsym_1.20.1-2+deb12u5_arm64.deb
 8598d22e25612202ccb1b018a452ba7f 31216 net optional krb5-kpropd_1.20.1-2+deb12u5_arm64.deb
 0b92e06af006bf4e0358b2ec0aff9be5 125724 libdevel optional krb5-multidev_1.20.1-2+deb12u5_arm64.deb
 6af359d1fad2734f27c2e7687f1fc9db 29068 debug optional krb5-otp-dbgsym_1.20.1-2+deb12u5_arm64.deb
 77e2e22f34a3794bfe241c4679473e6e 21788 net optional krb5-otp_1.20.1-2+deb12u5_arm64.deb
 f6875a0ef7ce50cbd0cec9fe6af1caaa 156060 debug optional krb5-pkinit-dbgsym_1.20.1-2+deb12u5_arm64.deb
 c5a5999024609c80b1e3619c3068f3d3 54516 net optional krb5-pkinit_1.20.1-2+deb12u5_arm64.deb
 5caba79abe65587d0ed3ef4174d549e3 202360 debug optional krb5-user-dbgsym_1.20.1-2+deb12u5_arm64.deb
 43af625c6ef46a9c5f149e5516aac513 116332 net optional krb5-user_1.20.1-2+deb12u5_arm64.deb
 a18d259907af8b18877074c5c0a22273 16056 net optional krb5_1.20.1-2+deb12u5_arm64-buildd.buildinfo
 82840e00deb29df1dedd08d647a7e630 124152 libs optional libgssapi-krb5-2_1.20.1-2+deb12u5_arm64.deb
 ed5e376e8e2233752398010b1e768104 55976 libs optional libgssrpc4_1.20.1-2+deb12u5_arm64.deb
 d592b48bff9b03936983a9ae509ebdf5 79880 libs optional libk5crypto3_1.20.1-2+deb12u5_arm64.deb
 56095c3ccc9eb55bae22052ead6b39bf 40060 libs optional libkadm5clnt-mit12_1.20.1-2+deb12u5_arm64.deb
 1b7fc9ea07da48b9fd5f534cbff0695e 51912 libs optional libkadm5srv-mit12_1.20.1-2+deb12u5_arm64.deb
 d99e07cabf6e4caa4adea05e116f405e 40324 libs optional libkdb5-10_1.20.1-2+deb12u5_arm64.deb
 1b6429de1fe7e3222b249459b0026a5c 15996 libdevel optional libkrad-dev_1.20.1-2+deb12u5_arm64.deb
 07b73571b5e274d6217048f5b0220fbd 24528 libs optional libkrad0_1.20.1-2+deb12u5_arm64.deb
 60efaab427adb54ff21f904ee3a00575 315528 libs optional libkrb5-3_1.20.1-2+deb12u5_arm64.deb
 1f3e99d97aa9a55aafadddbc9ae7532d 2137636 debug optional libkrb5-dbg_1.20.1-2+deb12u5_arm64.deb
 27cefd0e4a7c210ec6b8c861a1b71d7e 15520 libdevel optional libkrb5-dev_1.20.1-2+deb12u5_arm64.deb
 f74a6574e55a315a3de98895daa7c57e 32592 libs optional libkrb5support0_1.20.1-2+deb12u5_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=n0nX
-----END PGP SIGNATURE-----