-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 09:23:58 +0200
Source: krb5
Binary: krb5-admin-server krb5-admin-server-dbgsym krb5-gss-samples krb5-gss-samples-dbgsym krb5-k5tls krb5-k5tls-dbgsym krb5-kdc krb5-kdc-dbgsym krb5-kdc-ldap krb5-kdc-ldap-dbgsym krb5-kpropd krb5-kpropd-dbgsym krb5-multidev krb5-otp krb5-otp-dbgsym krb5-pkinit krb5-pkinit-dbgsym krb5-user krb5-user-dbgsym libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit12 libkadm5srv-mit12 libkdb5-10 libkrad-dev libkrad0 libkrb5-3 libkrb5-dbg libkrb5-dev libkrb5support0
Architecture: s390x
Version: 1.20.1-2+deb12u5
Distribution: bookworm-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-gss-samples - MIT Kerberos GSS Sample applications
 krb5-k5tls - TLS plugin for MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
 krb5-kpropd - MIT Kerberos key server (Slave KDC Support)
 krb5-multidev - development files for MIT Kerberos without Heimdal conflict
 krb5-otp   - OTP plugin for MIT Kerberos
 krb5-pkinit - PKINIT plugin for MIT Kerberos
 krb5-user  - basic programs to authenticate using MIT Kerberos
 libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
 libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
 libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
 libkadm5clnt-mit12 - MIT Kerberos runtime libraries - Administration Clients
 libkadm5srv-mit12 - MIT Kerberos runtime libraries - KDC and Admin Server
 libkdb5-10 - MIT Kerberos runtime libraries - Kerberos database
 libkrad-dev - MIT Kerberos RADIUS Library Development
 libkrad0   - MIT Kerberos runtime libraries - RADIUS library
 libkrb5-3  - MIT Kerberos runtime libraries
 libkrb5-dbg - debugging files for MIT Kerberos
 libkrb5-dev - headers and development libraries for MIT Kerberos
 libkrb5support0 - MIT Kerberos runtime libraries - Support library
Closes: 1135317
Changes:
 krb5 (1.20.1-2+deb12u5) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
     (Closes: #1135317)
Checksums-Sha1:
 f4944f660edd9abc63b55ddc79bc6522ca28f683 204420 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_s390x.deb
 4eec0b44341f64cd01889a46d1ec87e84682533e 88524 krb5-admin-server_1.20.1-2+deb12u5_s390x.deb
 6ac054c465459fd5750d4936b4bdf1996c741abe 36244 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_s390x.deb
 1d983ec451711daeb3a937d3be09ee3d8f7395ee 27836 krb5-gss-samples_1.20.1-2+deb12u5_s390x.deb
 f083ed8a6d1e6fadbfd897ce17d37703ff123f7c 19464 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_s390x.deb
 e4bb82030f78bdf2122d592c192c07b4e824279c 19144 krb5-k5tls_1.20.1-2+deb12u5_s390x.deb
 9e2ea96116d08cae39054c0841ba554144d93a04 443492 krb5-kdc-dbgsym_1.20.1-2+deb12u5_s390x.deb
 e056a7fdf9e441e94a8f40464ae7e6413742a8b6 184332 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_s390x.deb
 caf2bcc4ce8841073c1c5e90970a4c810e5949af 82836 krb5-kdc-ldap_1.20.1-2+deb12u5_s390x.deb
 c38293893ef4e6f2ee22cd4ee3432d15a009b125 170856 krb5-kdc_1.20.1-2+deb12u5_s390x.deb
 2b69b888c11b9f03701a0010c5f4a509a517e44a 42428 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_s390x.deb
 a6ce167acba108e083ca7740516327d6e8fc9bb6 31080 krb5-kpropd_1.20.1-2+deb12u5_s390x.deb
 0719fcc0f2bf0e9642d85cd63014f2f307bfb69b 125720 krb5-multidev_1.20.1-2+deb12u5_s390x.deb
 42325626b247add790966a3d5277ced6d5b8a2a9 28852 krb5-otp-dbgsym_1.20.1-2+deb12u5_s390x.deb
 84b7c747683e18a6550e4d3aaa30ea957e224eba 21656 krb5-otp_1.20.1-2+deb12u5_s390x.deb
 28a7c6cb052cff4ee16807d1feb8bbc27a8b1135 154284 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_s390x.deb
 05b592a49118e041e4407d9bd71dac26d2bbdde9 54528 krb5-pkinit_1.20.1-2+deb12u5_s390x.deb
 ab186b35a5eb28f508d6795cafe14818275bceed 193188 krb5-user-dbgsym_1.20.1-2+deb12u5_s390x.deb
 dc2708e325615978dfaa08cff044b71699d7f87e 114260 krb5-user_1.20.1-2+deb12u5_s390x.deb
 699a84590a9a7b386cb9b7db06c84aba69a1b4b7 15928 krb5_1.20.1-2+deb12u5_s390x-buildd.buildinfo
 e2e89c38855c25854c908971f420ed319c900713 122680 libgssapi-krb5-2_1.20.1-2+deb12u5_s390x.deb
 0d9282fb22a934151a8603ab1170a65c6a0b5eb1 55088 libgssrpc4_1.20.1-2+deb12u5_s390x.deb
 f31bb2b5a85b123a876e2509c0203dd9788238c8 77496 libk5crypto3_1.20.1-2+deb12u5_s390x.deb
 247d8701c0fd0b9777e06b6f7e2b1982c5f149e5 38968 libkadm5clnt-mit12_1.20.1-2+deb12u5_s390x.deb
 665fe0af49e5f257b99f80db9853e84cc6c93ab5 50568 libkadm5srv-mit12_1.20.1-2+deb12u5_s390x.deb
 94eb439e137f376b98dbb9c6de7b6b0e9fa854d6 39776 libkdb5-10_1.20.1-2+deb12u5_s390x.deb
 de8297a5adc9db6d96f78126b7750bf421c8cfa6 16000 libkrad-dev_1.20.1-2+deb12u5_s390x.deb
 582d5e8bee2e6f73f6c4026aa623f23585d0c36c 24264 libkrad0_1.20.1-2+deb12u5_s390x.deb
 2cea8376212f53db632e0b5b4d1053d77e36940c 311040 libkrb5-3_1.20.1-2+deb12u5_s390x.deb
 9fe48cd3a395b94fc6e95f88f276d063135a45fc 2129844 libkrb5-dbg_1.20.1-2+deb12u5_s390x.deb
 e4bb4fddf778750391b4d6ac10557f60b386b65c 15516 libkrb5-dev_1.20.1-2+deb12u5_s390x.deb
 759d080432d6ca984c39ccc27cd5df23d2159fe2 32332 libkrb5support0_1.20.1-2+deb12u5_s390x.deb
Checksums-Sha256:
 bc3db8fa927efd48d479698daf245b209aa520ae8008041dfcc395d55d92cd70 204420 krb5-admin-server-dbgsym_1.20.1-2+deb12u5_s390x.deb
 6780cf77061060329fa4080049f6b64fb83775cc7106fdeff16e7c4c90a142ef 88524 krb5-admin-server_1.20.1-2+deb12u5_s390x.deb
 2a3b71b95b12ddf5074a1f0e8e550e1b872b2f6d37d5c361e381f22175ae64c1 36244 krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_s390x.deb
 cca29c3d7912b553b7bec56109a4127ed0a4d90d709e7b8eef3cb9dd2cb1f8dd 27836 krb5-gss-samples_1.20.1-2+deb12u5_s390x.deb
 fe3a8e15a73825069cfe59c5353daa0782f932bb1fec329d0d4fcaa3735cfd15 19464 krb5-k5tls-dbgsym_1.20.1-2+deb12u5_s390x.deb
 139391b7db810fc5e6f714d79e7c84fa5612d641a79a1a250706cc2a2184360d 19144 krb5-k5tls_1.20.1-2+deb12u5_s390x.deb
 888bd10fbce1f4931f9405bb1844d17fbf39b9f5e2389ee3ad2730f7323dd184 443492 krb5-kdc-dbgsym_1.20.1-2+deb12u5_s390x.deb
 cc7d270f3b939c98c2749bc829e371bfd60a49f0ded4e90a47d327e0debcc85f 184332 krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_s390x.deb
 34a4e59c810c778ce936dc359a94173357433dae82d34704a95cf6fe2aef0946 82836 krb5-kdc-ldap_1.20.1-2+deb12u5_s390x.deb
 87ee5239c7a92be94a70d266a8ec2cf94d803c9c61f296a6b98c54ee69b5b547 170856 krb5-kdc_1.20.1-2+deb12u5_s390x.deb
 97070989b0c45538f8fa2ea845cc26af6ed2627b4545a9041c38e235d7f1a072 42428 krb5-kpropd-dbgsym_1.20.1-2+deb12u5_s390x.deb
 50c89932a1575ea5c8e1db79c6037240821a278bbfd4fa4d2fceb7adaf406a7c 31080 krb5-kpropd_1.20.1-2+deb12u5_s390x.deb
 3a06c73907d1850ba097733aa08b07aee391ba6f9b5261a52262aaaa298a1709 125720 krb5-multidev_1.20.1-2+deb12u5_s390x.deb
 88c180fe64b16f9fb86416030ce4e506f28e42a4ec8fd0a1d453e9f7784a455c 28852 krb5-otp-dbgsym_1.20.1-2+deb12u5_s390x.deb
 42baf3ae774dedc967d4be3d43df55652b52da8401b20c756beba9a0c14964cf 21656 krb5-otp_1.20.1-2+deb12u5_s390x.deb
 5e27845b6149243e4c5a43f2b73ec64abe87fd60e25dcce07b360a7fef07b4df 154284 krb5-pkinit-dbgsym_1.20.1-2+deb12u5_s390x.deb
 406b1294b3a82841960ca1eb6348a639a8c1db393a51542243ec6e42ceb99e0f 54528 krb5-pkinit_1.20.1-2+deb12u5_s390x.deb
 e325d620b8588b905f033fcf31aedc17d2b8085931f7b4a471f15227d8c7ede2 193188 krb5-user-dbgsym_1.20.1-2+deb12u5_s390x.deb
 b2353907acded2da9a12dc4571a82a4168c3671ac641c20ef315cddad8887ed1 114260 krb5-user_1.20.1-2+deb12u5_s390x.deb
 b00de885bc0f966c6f9876e267988b0c400f72ba9bcdb0139130dcf0d6cdc11c 15928 krb5_1.20.1-2+deb12u5_s390x-buildd.buildinfo
 42d937c585e1dc456336f45ebe1525493d30a516a2d996951f231cf893f4c4b9 122680 libgssapi-krb5-2_1.20.1-2+deb12u5_s390x.deb
 8ddab7cfafd5a55346723aaa186a71f0ecb7cda97b8bb6d38ab3a17ce806affc 55088 libgssrpc4_1.20.1-2+deb12u5_s390x.deb
 1b647a02b526a3c5b2e7426495e6277a95668fcd18e5d31f483f07e9b7f4f0ac 77496 libk5crypto3_1.20.1-2+deb12u5_s390x.deb
 a4fdfac9b8ac3dad3cf83103817239be773f8106a9a6bdba9461ef7ac2efef88 38968 libkadm5clnt-mit12_1.20.1-2+deb12u5_s390x.deb
 bc86e64e8571c35c22f9a5031995c5b3580d3495cc130d33814310f316b36a70 50568 libkadm5srv-mit12_1.20.1-2+deb12u5_s390x.deb
 c53070eb8776e7450214ff501f22810da4e0337e20f6e88a3208387633a5e7ce 39776 libkdb5-10_1.20.1-2+deb12u5_s390x.deb
 559ffd515fd4954ebd3fe24e13747e13c61f76fffb9e751e7637d9764b1787e4 16000 libkrad-dev_1.20.1-2+deb12u5_s390x.deb
 87f1ca026eed0b44b83ec4d0c4d0cf52cca2211a8d59fa73a091239a2597ada8 24264 libkrad0_1.20.1-2+deb12u5_s390x.deb
 ebd848603f03ba9adcbd6c04bf04748f023d64c1ea6a26e438ac23a2512211f2 311040 libkrb5-3_1.20.1-2+deb12u5_s390x.deb
 2515762f419619b51df92ff2dc0e1b64c2a2077a4cb157487af38a6c492ba16d 2129844 libkrb5-dbg_1.20.1-2+deb12u5_s390x.deb
 624fb21f5baa5a48c564fb2e3aed72c908a67a4521d8eb2b00ff3a6e58dc9d74 15516 libkrb5-dev_1.20.1-2+deb12u5_s390x.deb
 29b1c0d32f8f94d0c1002c40c91bb62202fb9281ce0665d24ee3362f05a161b0 32332 libkrb5support0_1.20.1-2+deb12u5_s390x.deb
Files:
 1388623803f1810ce2e7338bef6907cb 204420 debug optional krb5-admin-server-dbgsym_1.20.1-2+deb12u5_s390x.deb
 01435fdd71ee5d027ede9391bc910aaf 88524 net optional krb5-admin-server_1.20.1-2+deb12u5_s390x.deb
 2cabb424aa126886da17c294b40ce769 36244 debug optional krb5-gss-samples-dbgsym_1.20.1-2+deb12u5_s390x.deb
 a648f89e7ecfcfcf825e3a8a38fcbee5 27836 net optional krb5-gss-samples_1.20.1-2+deb12u5_s390x.deb
 913d177beacf1f6f24b6468970e785d8 19464 debug optional krb5-k5tls-dbgsym_1.20.1-2+deb12u5_s390x.deb
 b666f04505e7d3313daf5d0f5fb4fb67 19144 net optional krb5-k5tls_1.20.1-2+deb12u5_s390x.deb
 ca4e40687f44432287a08a6ad0fc4e0e 443492 debug optional krb5-kdc-dbgsym_1.20.1-2+deb12u5_s390x.deb
 bc74cd955b3e56b783e1116fab0ae9c0 184332 debug optional krb5-kdc-ldap-dbgsym_1.20.1-2+deb12u5_s390x.deb
 79e0aebfeb07e80cdb1778a77fcb1616 82836 net optional krb5-kdc-ldap_1.20.1-2+deb12u5_s390x.deb
 3b6f10af84f24f224dbeefc414d7dc07 170856 net optional krb5-kdc_1.20.1-2+deb12u5_s390x.deb
 dc563bebc2c2e0ef7f8394e817e96690 42428 debug optional krb5-kpropd-dbgsym_1.20.1-2+deb12u5_s390x.deb
 c9a8768c0412a8119e8b5cebf4163579 31080 net optional krb5-kpropd_1.20.1-2+deb12u5_s390x.deb
 936dc9a31ecd5e895fe2334c00b0990f 125720 libdevel optional krb5-multidev_1.20.1-2+deb12u5_s390x.deb
 a54a6e0d8d3248e9d837ca7d1fcc96ce 28852 debug optional krb5-otp-dbgsym_1.20.1-2+deb12u5_s390x.deb
 664c79ef7299c8642801f8dab045fb5a 21656 net optional krb5-otp_1.20.1-2+deb12u5_s390x.deb
 53d74247b0bb44b3dbb3194ad23127cc 154284 debug optional krb5-pkinit-dbgsym_1.20.1-2+deb12u5_s390x.deb
 2fe3f4f738226778f12898478a15988e 54528 net optional krb5-pkinit_1.20.1-2+deb12u5_s390x.deb
 36dcd395e0047a0db00abc0619c7a315 193188 debug optional krb5-user-dbgsym_1.20.1-2+deb12u5_s390x.deb
 7432e919c70d56c4ef14e0771b3600a5 114260 net optional krb5-user_1.20.1-2+deb12u5_s390x.deb
 9957e5e2c6ef8056d88a29d7b019f4cd 15928 net optional krb5_1.20.1-2+deb12u5_s390x-buildd.buildinfo
 b60e9f822154ec7bfa2aff078e1a3172 122680 libs optional libgssapi-krb5-2_1.20.1-2+deb12u5_s390x.deb
 a55bb949ed17a7bcdee0007e8b92de15 55088 libs optional libgssrpc4_1.20.1-2+deb12u5_s390x.deb
 992eb11eff062fc3e55f832d2e3680ae 77496 libs optional libk5crypto3_1.20.1-2+deb12u5_s390x.deb
 0aa046e2c35acd68ba85831027886a00 38968 libs optional libkadm5clnt-mit12_1.20.1-2+deb12u5_s390x.deb
 718e169a060f2d5484f4ced22ea08b56 50568 libs optional libkadm5srv-mit12_1.20.1-2+deb12u5_s390x.deb
 1d3f60507fe85fb284bb66239367c627 39776 libs optional libkdb5-10_1.20.1-2+deb12u5_s390x.deb
 ce335cbf20e1fea7c746dda0ead8e324 16000 libdevel optional libkrad-dev_1.20.1-2+deb12u5_s390x.deb
 7e53c364eb82f3612e0b53a042f31f09 24264 libs optional libkrad0_1.20.1-2+deb12u5_s390x.deb
 779f132192c319ec034bcd59e55e7212 311040 libs optional libkrb5-3_1.20.1-2+deb12u5_s390x.deb
 ab4654f4a8b12f548c88841343dc557f 2129844 debug optional libkrb5-dbg_1.20.1-2+deb12u5_s390x.deb
 c62beb28d26a1ff622e8a44c345b78ce 15516 libdevel optional libkrb5-dev_1.20.1-2+deb12u5_s390x.deb
 f44823fda0f950ce1cee0f532a39989e 32332 libs optional libkrb5support0_1.20.1-2+deb12u5_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=eDpc
-----END PGP SIGNATURE-----