-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 09:23:58 +0200
Source: krb5
Binary: krb5-admin-server krb5-admin-server-dbgsym krb5-gss-samples krb5-gss-samples-dbgsym krb5-k5tls krb5-k5tls-dbgsym krb5-kdc krb5-kdc-dbgsym krb5-kdc-ldap krb5-kdc-ldap-dbgsym krb5-kpropd krb5-kpropd-dbgsym krb5-multidev krb5-otp krb5-otp-dbgsym krb5-pkinit krb5-pkinit-dbgsym krb5-user krb5-user-dbgsym libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit12 libkadm5srv-mit12 libkdb5-10 libkrad-dev libkrad0 libkrb5-3 libkrb5-dbg libkrb5-dev libkrb5support0
Architecture: i386
Version: 1.20.1-2+deb12u5
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-gss-samples - MIT Kerberos GSS Sample applications
 krb5-k5tls - TLS plugin for MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
 krb5-kpropd - MIT Kerberos key server (Slave KDC Support)
 krb5-multidev - development files for MIT Kerberos without Heimdal conflict
 krb5-otp   - OTP plugin for MIT Kerberos
 krb5-pkinit - PKINIT plugin for MIT Kerberos
 krb5-user  - basic programs to authenticate using MIT Kerberos
 libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
 libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
 libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
 libkadm5clnt-mit12 - MIT Kerberos runtime libraries - Administration Clients
 libkadm5srv-mit12 - MIT Kerberos runtime libraries - KDC and Admin Server
 libkdb5-10 - MIT Kerberos runtime libraries - Kerberos database
 libkrad-dev - MIT Kerberos RADIUS Library Development
 libkrad0   - MIT Kerberos runtime libraries - RADIUS library
 libkrb5-3  - MIT Kerberos runtime libraries
 libkrb5-dbg - debugging files for MIT Kerberos
 libkrb5-dev - headers and development libraries for MIT Kerberos
 libkrb5support0 - MIT Kerberos runtime libraries - Support library
Closes: 1135317
Changes:
 krb5 (1.20.1-2+deb12u5) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
     (Closes: #1135317)
Checksums-Sha1:
 c13b0e80868db77c26dda9c9f9163519811418bb 187836 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_i386.deb
 2152b17b15289caf4f94aff67daaf2545e0fdb48 97292 krb5-admin-server_1.20.1-2+deb12u5_i386.deb
 61f9d1b4a3eedbd5d2e4ca231b42365f04400ce4 36436 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_i386.deb
 8597da2705435e9b6f4dc853c1cc2f47ce522535 29288 krb5-gss-samples_1.20.1-2+deb12u5_i386.deb
 26f2626b581d601e74346b07dba00f98bbe96701 18808 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_i386.deb
 7a92a12dd76706a4910f2498dfe7037270ab6b85 20180 krb5-k5tls_1.20.1-2+deb12u5_i386.deb
 2adc2a8d19d439065d9b0e0b6a4b8c3c7f898d01 402824 krb5-kdc-dbgsym_1.20.1-2+deb12u5_i386.deb
 b30afb8e2ebd7071cc9a96456439568ba557df96 171648 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_i386.deb
 11693fea094d7496b03ca1ee741ec9f682de1d88 93492 krb5-kdc-ldap_1.20.1-2+deb12u5_i386.deb
 689b90d035139822dc2a0cd6b65a39c6cffe8769 192236 krb5-kdc_1.20.1-2+deb12u5_i386.deb
 12f356c6da724241bcbe9453cf013109a72a6530 41688 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_i386.deb
 14fb54073c96c2bdd534d15c3829a7c3753c9b5d 32624 krb5-kpropd_1.20.1-2+deb12u5_i386.deb
 7d143d9efe677e1b5be1f437b51e1d97e5fddc75 125728 krb5-multidev_1.20.1-2+deb12u5_i386.deb
 1c71759a1fafa6a1416da8b75a4baa5bb9acabc9 27360 krb5-otp-dbgsym_1.20.1-2+deb12u5_i386.deb
 1b41d25c5ff8a8b600279b112ed66adece9d932e 23024 krb5-otp_1.20.1-2+deb12u5_i386.deb
 fbe9ae8959e01ce2aa67fbe2f5fff48916110e8f 136416 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_i386.deb
 8d4905e032f0ed79b83910d856248ca792207b78 62816 krb5-pkinit_1.20.1-2+deb12u5_i386.deb
 ccf01459b2e86df9fc0d8736beb839dad4eb3b07 179072 krb5-user-dbgsym_1.20.1-2+deb12u5_i386.deb
 a9f51bd44b790c34dd2ae6b3dc62011bbda673ee 121468 krb5-user_1.20.1-2+deb12u5_i386.deb
 684963eb57bc3b75b1f5e42fafe8b6cc03227921 15878 krb5_1.20.1-2+deb12u5_i386-buildd.buildinfo
 6485c0c43db125767a268e90fbfe87bde5a96cfb 145000 libgssapi-krb5-2_1.20.1-2+deb12u5_i386.deb
 9bb353569203bc9d931927efdcef2c7b7b014fa8 62748 libgssrpc4_1.20.1-2+deb12u5_i386.deb
 1d09ecba156d9847bd2fdc2b886d7eab1aec167e 83328 libk5crypto3_1.20.1-2+deb12u5_i386.deb
 b9fcf9eedc6a08fea7507d0ca3ce7e2ce71cce33 43260 libkadm5clnt-mit12_1.20.1-2+deb12u5_i386.deb
 4133c8a205f196cc4e784488e510918aa62c0b8f 56836 libkadm5srv-mit12_1.20.1-2+deb12u5_i386.deb
 fa84d80c51514dcd614819b7e8983fc83b8b10e8 44616 libkdb5-10_1.20.1-2+deb12u5_i386.deb
 fff0ea1840c49d35b16ce32eea283445b93b8e0f 15992 libkrad-dev_1.20.1-2+deb12u5_i386.deb
 127688dc26801b80fb26ce236bb4efb32faf731e 25772 libkrad0_1.20.1-2+deb12u5_i386.deb
 a36a048db6b3e529daa83676f788d27137862101 360440 libkrb5-3_1.20.1-2+deb12u5_i386.deb
 eeffac50337cfe761cde27d528d4115eebb889c0 1916520 libkrb5-dbg_1.20.1-2+deb12u5_i386.deb
 995a22510384b8466132a322b03f49dd64f908aa 15508 libkrb5-dev_1.20.1-2+deb12u5_i386.deb
 2096a83a295aaebe6d95b91221bb12b69d71a8f7 36048 libkrb5support0_1.20.1-2+deb12u5_i386.deb
Checksums-Sha256:
 40d3e52b5bca8d3d462a5b4c710fe5efcdc41767e7610383988840057d123693 187836 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_i386.deb
 510a5f612c9aea8ca32c05956778affc06d27af2e7ce717a43886fb9aea64420 97292 krb5-admin-server_1.20.1-2+deb12u5_i386.deb
 7eb2a472762d85833f9b78f626d6bddd1d80cac824f2fc3f22fd75475dcc7ef9 36436 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_i386.deb
 fc1f1b83552c8b2bb617880f8ccfedde9fdc708f0c459131a401ade2c545c51a 29288 krb5-gss-samples_1.20.1-2+deb12u5_i386.deb
 1ed51f94600cb81f3b2333c55b0185c562b8dcad5b89d66ddd35f09c070a7371 18808 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_i386.deb
 89f9245b8a6bba630478a2e877cc773604d3ac56ed00d88ea5a472b1222c2110 20180 krb5-k5tls_1.20.1-2+deb12u5_i386.deb
 07dbc02191a0a9a8062f411bdb78058f3233617fecbc31adaf98e9ab5f6a89ec 402824 krb5-kdc-dbgsym_1.20.1-2+deb12u5_i386.deb
 77f7c49073b613c23c72d99c34a93854c7b307e9ba51109b85abee2f878f7a5a 171648 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_i386.deb
 85591bf146638e74c2023dcd678e8f8fb1dc2b412993a4e1be481cfb04a509aa 93492 krb5-kdc-ldap_1.20.1-2+deb12u5_i386.deb
 0cd997f9cb98af5637b11fa4c55686f2a74b31d623b9cb39c95b4490f43a6535 192236 krb5-kdc_1.20.1-2+deb12u5_i386.deb
 8dc3c49cd13f2a5f029ad3a2d40cad9cc8b7f08b066f465d0060c5181c3d9eac 41688 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_i386.deb
 eda06b21f42c37f439124e462e639c5c44f5ab301d7b3d1c89ac565b4c0b5fb6 32624 krb5-kpropd_1.20.1-2+deb12u5_i386.deb
 2a473a7f7b1905a18cfe599d70d4eaa806abefb773cc7bf7eff4deda2af647a4 125728 krb5-multidev_1.20.1-2+deb12u5_i386.deb
 4952dcdbda305d9b9b4903968de709f457078676e8d156c584c04c3fe41a03ab 27360 krb5-otp-dbgsym_1.20.1-2+deb12u5_i386.deb
 b87a963c72103b2072c9f090f487987cecb9288b6522aee0d3dd03f81b14ca24 23024 krb5-otp_1.20.1-2+deb12u5_i386.deb
 270b7b5c98cb435b13c3a5faeb4d0825d29769bcc91339239f5d77f05b0d4c82 136416 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_i386.deb
 9c627ed9b30b224b3ab94d98744aaa4820dea05914578e9dda73fafb4116fd05 62816 krb5-pkinit_1.20.1-2+deb12u5_i386.deb
 2f6588c300433f53414ff63ca2f2c8b786e55436faaf4e016845a0ee909fee93 179072 krb5-user-dbgsym_1.20.1-2+deb12u5_i386.deb
 384135ed74738cc5489aedd20e25af5a7ca75dffcf1ab60e2e0ee04b75ff0607 121468 krb5-user_1.20.1-2+deb12u5_i386.deb
 9c7fb686708a09e752704e983d18407adb83ec72e466245a56463bf1eb15ebad 15878 krb5_1.20.1-2+deb12u5_i386-buildd.buildinfo
 40da2c7c127d6b3c17ae8990270e7e5b3fd25e78562e12d5806512f9cf200f52 145000 libgssapi-krb5-2_1.20.1-2+deb12u5_i386.deb
 cfebb5cbb8411cedd326c3a4c10f6ce413b376999c66db2e168de96cf9e2a52d 62748 libgssrpc4_1.20.1-2+deb12u5_i386.deb
 2badc281ffa1dc716a701413e01c48ee2b17c73d1e194ee2228b11e6200f4278 83328 libk5crypto3_1.20.1-2+deb12u5_i386.deb
 169cb64e59d4d74704a8481728ddfc47c0c68c9a25ee9b5c00a16977164e4437 43260 libkadm5clnt-mit12_1.20.1-2+deb12u5_i386.deb
 62d644f4e9a1cac24743d41cf26ceea88175a497256221e09729ea00a37fbd2d 56836 libkadm5srv-mit12_1.20.1-2+deb12u5_i386.deb
 389836a27477374c2b82f900c888a158b1fde04eb59d6fa00a0f6db8fe8e25d4 44616 libkdb5-10_1.20.1-2+deb12u5_i386.deb
 15ec18220216c7b642dc60c2cc560a674caa7f25bd595c25dc99ffb9bcccf31b 15992 libkrad-dev_1.20.1-2+deb12u5_i386.deb
 de5d5ef016080fae5a4c6d3148dae2e2a437b81ff5e8c3439ff970076670cfdb 25772 libkrad0_1.20.1-2+deb12u5_i386.deb
 1f70267f4e6a623efc785dcd24427692afb499951c058d24db95540003b99468 360440 libkrb5-3_1.20.1-2+deb12u5_i386.deb
 6dd017fe7ef7f2fd49af0593b05d9645c69abf92ee7f52bccfe295d9d20345ad 1916520 libkrb5-dbg_1.20.1-2+deb12u5_i386.deb
 f4f0a227138484df92ea72614ec0d29440cf25bfd2bad9d3977a52ba42c7dabb 15508 libkrb5-dev_1.20.1-2+deb12u5_i386.deb
 8d51bd1c6fa9d3546b28b5c2215eb92cd5fe2085179c37347622b7c5f580ef98 36048 libkrb5support0_1.20.1-2+deb12u5_i386.deb
Files:
 6b9e1b7c19a8e030c30c1b24fa7d02e9 187836 debug optional krb5-admin-server-dbgsym_1.20.1-2+deb12u5_i386.deb
 123220405189f6b099b9c6a32c77b26e 97292 net optional krb5-admin-server_1.20.1-2+deb12u5_i386.deb
 c71e529e41f4494029ca902eeca74df7 36436 debug optional krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_i386.deb
 6380046d4dcc166fd49d259d33943ccf 29288 net optional krb5-gss-samples_1.20.1-2+deb12u5_i386.deb
 ffcd0e081351af967d9a997b423c2d61 18808 debug optional krb5-k5tls-dbgsym_1.20.1-2+deb12u5_i386.deb
 6d71b8b0f462839d6c1b829a5fe5bb8c 20180 net optional krb5-k5tls_1.20.1-2+deb12u5_i386.deb
 43f79755f260b27393a0a0e48e90be5a 402824 debug optional krb5-kdc-dbgsym_1.20.1-2+deb12u5_i386.deb
 e8d08e5e54a21abd764e252ee33d170e 171648 debug optional krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_i386.deb
 5aece8d84c8db5ef8612f48a18eeaf82 93492 net optional krb5-kdc-ldap_1.20.1-2+deb12u5_i386.deb
 1625406b06dd78193529288f1b65cf62 192236 net optional krb5-kdc_1.20.1-2+deb12u5_i386.deb
 deb0ed3c059471cbfb6a5abc781e031c 41688 debug optional krb5-kpropd-dbgsym_1.20.1-2+deb12u5_i386.deb
 f23c22319c892b3256733e681517ab43 32624 net optional krb5-kpropd_1.20.1-2+deb12u5_i386.deb
 bfb0b5a0498fa26061c1b25350306694 125728 libdevel optional krb5-multidev_1.20.1-2+deb12u5_i386.deb
 947fb68377e373be983f5ee49e97b0e5 27360 debug optional krb5-otp-dbgsym_1.20.1-2+deb12u5_i386.deb
 05d02518a5aeaec9d0b95f5d9a396d29 23024 net optional krb5-otp_1.20.1-2+deb12u5_i386.deb
 43aa43e50270bcd12da6c3dbc04d97cd 136416 debug optional krb5-pkinit-dbgsym_1.20.1-2+deb12u5_i386.deb
 a8237867010fdf4b0537cf82fc55e703 62816 net optional krb5-pkinit_1.20.1-2+deb12u5_i386.deb
 ec421ef696e98cb46c595c0b7db03509 179072 debug optional krb5-user-dbgsym_1.20.1-2+deb12u5_i386.deb
 4116b6df3cbf3e4ec2bed99e26770665 121468 net optional krb5-user_1.20.1-2+deb12u5_i386.deb
 9fb33100c752be7710fa950e380475d9 15878 net optional krb5_1.20.1-2+deb12u5_i386-buildd.buildinfo
 e6def9f10c0ae30ab36f8765f412a0e2 145000 libs optional libgssapi-krb5-2_1.20.1-2+deb12u5_i386.deb
 ea77023018798dadd567cb182ab9e9ec 62748 libs optional libgssrpc4_1.20.1-2+deb12u5_i386.deb
 0cd8a75f3eb78552049fdaf87610279e 83328 libs optional libk5crypto3_1.20.1-2+deb12u5_i386.deb
 65303aca3ad6b27588b1f02237f3595e 43260 libs optional libkadm5clnt-mit12_1.20.1-2+deb12u5_i386.deb
 daf2cc5d3d44385884fd6dedbe8c0c07 56836 libs optional libkadm5srv-mit12_1.20.1-2+deb12u5_i386.deb
 958d29b56d50f20ee31da73962f67c2a 44616 libs optional libkdb5-10_1.20.1-2+deb12u5_i386.deb
 0d58f99bcc08fec956ca08f9d8762996 15992 libdevel optional libkrad-dev_1.20.1-2+deb12u5_i386.deb
 7570654959104ee91c6611bdee10ef0c 25772 libs optional libkrad0_1.20.1-2+deb12u5_i386.deb
 e1ad5d9c96a6ae5a98f4fb05e96d3704 360440 libs optional libkrb5-3_1.20.1-2+deb12u5_i386.deb
 fbb020638c3b4d8c982683c73e628809 1916520 debug optional libkrb5-dbg_1.20.1-2+deb12u5_i386.deb
 2504dc6e81c1ed29f8df3c03aa36afea 15508 libdevel optional libkrb5-dev_1.20.1-2+deb12u5_i386.deb
 3c42aa59ac74647a3402cb01b061faf1 36048 libs optional libkrb5support0_1.20.1-2+deb12u5_i386.deb

-----BEGIN PGP SIGNATURE-----
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=2lXO
-----END PGP SIGNATURE-----