-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 May 2026 09:16:51 +0200 Source: krb5 Binary: krb5-admin-server krb5-admin-server-dbgsym krb5-gss-samples krb5-gss-samples-dbgsym krb5-k5tls krb5-k5tls-dbgsym krb5-kdc krb5-kdc-dbgsym krb5-kdc-ldap krb5-kdc-ldap-dbgsym krb5-kpropd krb5-kpropd-dbgsym krb5-multidev krb5-otp krb5-otp-dbgsym krb5-pkinit krb5-pkinit-dbgsym krb5-user krb5-user-dbgsym libgssapi-krb5-2 libgssrpc4t64 libk5crypto3 libkadm5clnt-mit12 libkadm5srv-mit12 libkdb5-10t64 libkrad-dev libkrad0 libkrb5-3 libkrb5-dbg libkrb5-dev libkrb5support0 Architecture: arm64 Version: 1.21.3-5+deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Salvatore Bonaccorso Description: krb5-admin-server - MIT Kerberos master server (kadmind) krb5-gss-samples - MIT Kerberos GSS Sample applications krb5-k5tls - TLS plugin for MIT Kerberos krb5-kdc - MIT Kerberos key server (KDC) krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin krb5-kpropd - MIT Kerberos key server (Slave KDC Support) krb5-multidev - development files for MIT Kerberos without Heimdal conflict krb5-otp - OTP plugin for MIT Kerberos krb5-pkinit - PKINIT plugin for MIT Kerberos krb5-user - basic programs to authenticate using MIT Kerberos libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism libgssrpc4t64 - MIT Kerberos runtime libraries - GSS enabled ONCRPC libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library libkadm5clnt-mit12 - MIT Kerberos runtime libraries - Administration Clients libkadm5srv-mit12 - MIT Kerberos runtime libraries - KDC and Admin Server libkdb5-10t64 - MIT Kerberos runtime libraries - Kerberos database libkrad-dev - MIT Kerberos RADIUS Library Development libkrad0 - MIT Kerberos runtime libraries - RADIUS library libkrb5-3 - MIT Kerberos runtime libraries libkrb5-dbg - debugging files for MIT Kerberos libkrb5-dev - headers and development libraries for MIT Kerberos libkrb5support0 - MIT Kerberos runtime libraries - Support library Closes: 1135317 Changes: krb5 (1.21.3-5+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) (Closes: #1135317) Checksums-Sha1: 9d6e3c80adb9fdf1e040bbe43fb3cb0c87f1ba3d 213516 krb5-admin-server-dbgsym_1.21.3-5+deb13u1_arm64.deb 1c531a8d5984c099f06ecb28bd97d186a2dba3f5 91080 krb5-admin-server_1.21.3-5+deb13u1_arm64.deb cd67cb3ca6035bbcf08f834b3cff3cb6e3fbdb2e 39524 krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_arm64.deb 736808ed30c05906f0a7714eb8b6c5589be31600 28944 krb5-gss-samples_1.21.3-5+deb13u1_arm64.deb fc3108e05dbdcc995e32fa8e94f62292af101e35 19824 krb5-k5tls-dbgsym_1.21.3-5+deb13u1_arm64.deb ef535b90d2b005371c784cc951af5ef98b3f96fe 20588 krb5-k5tls_1.21.3-5+deb13u1_arm64.deb 4b959bc3359d00fcfa948d127bbc898447fe4526 499836 krb5-kdc-dbgsym_1.21.3-5+deb13u1_arm64.deb f5dc17e84c8ecf9f201d43dfa49b0660eeeba0f7 191340 krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_arm64.deb f0e41a545ca1614eca83482f263a1bacc610d710 86868 krb5-kdc-ldap_1.21.3-5+deb13u1_arm64.deb 12226bf526f32fd4909b486011ae8b38b631df1c 182040 krb5-kdc_1.21.3-5+deb13u1_arm64.deb 9e573bb86288c236e114815b2b7a53aebe6f24b3 43892 krb5-kpropd-dbgsym_1.21.3-5+deb13u1_arm64.deb b74922bf69eae335e691794c5100602edbc05a71 32072 krb5-kpropd_1.21.3-5+deb13u1_arm64.deb a7f775b5c78d9d5e769349d980b05b9f13e891d2 126404 krb5-multidev_1.21.3-5+deb13u1_arm64.deb ffa782fe4a3f9675032c61211f82b81b8adaff5b 29032 krb5-otp-dbgsym_1.21.3-5+deb13u1_arm64.deb acec3af16ef07c49f9827ffe26df44c40d638f7c 22248 krb5-otp_1.21.3-5+deb13u1_arm64.deb ddbfb6e0eb76c5f30d8ef0b202a0c7e3c6133932 157692 krb5-pkinit-dbgsym_1.21.3-5+deb13u1_arm64.deb b870bc7ebe989473d4c15f5fb175afb2023b8fee 55528 krb5-pkinit_1.21.3-5+deb13u1_arm64.deb e682bfb9382135deb4ee4ce7eb497bd3bcc3b7c3 203968 krb5-user-dbgsym_1.21.3-5+deb13u1_arm64.deb 5c9cc7d81c898c89e15f8647ceaa794b1f839695 117584 krb5-user_1.21.3-5+deb13u1_arm64.deb 7522d9e4f85ddc0a89eaa84ad22b4904d6d01127 16545 krb5_1.21.3-5+deb13u1_arm64-buildd.buildinfo a2f753f9acabb068db86ee66db359a6bd3752aba 127624 libgssapi-krb5-2_1.21.3-5+deb13u1_arm64.deb a96d6c076a0fad79f0ce2a4bb92ace20eca7b469 57192 libgssrpc4t64_1.21.3-5+deb13u1_arm64.deb d747ad6e5b95660c1ca90228b55886aa814a51db 81416 libk5crypto3_1.21.3-5+deb13u1_arm64.deb 8b887f649062f40f075aa83a348b8a477109df33 41296 libkadm5clnt-mit12_1.21.3-5+deb13u1_arm64.deb 5545c41ec7e7c983b9b966ba46680f4b6954f5ad 53308 libkadm5srv-mit12_1.21.3-5+deb13u1_arm64.deb 73b0e2aeb7a470d7ffbc46e1cb6c1024266cc4ae 41432 libkdb5-10t64_1.21.3-5+deb13u1_arm64.deb 4f3d2e62256d8962e046661726aa9d17b68dc9a1 16644 libkrad-dev_1.21.3-5+deb13u1_arm64.deb 70a672923558ffdd704bba99492683d010f992e5 25376 libkrad0_1.21.3-5+deb13u1_arm64.deb 31362ffd7d1d1733ff3dcd0f9c8707e8541eff27 308256 libkrb5-3_1.21.3-5+deb13u1_arm64.deb 327e726e59ee818c718f1a98d494784523ebbe24 2139040 libkrb5-dbg_1.21.3-5+deb13u1_arm64.deb 64beadcb3a742e5104045034f4813fed74c94569 16192 libkrb5-dev_1.21.3-5+deb13u1_arm64.deb 0eddb1b8b65c0b07c31fd32c0cdf69bbc0dc5c0a 32508 libkrb5support0_1.21.3-5+deb13u1_arm64.deb Checksums-Sha256: ab9e5bce7ffde61a97fc74069a4e69635f6aaa56a9d8eb916f9dec40508902a4 213516 krb5-admin-server-dbgsym_1.21.3-5+deb13u1_arm64.deb 81e11cd514637bf6e47da8f2e6c03f1844f7a88f5ad7f6460b16948eea8dad39 91080 krb5-admin-server_1.21.3-5+deb13u1_arm64.deb c6f4de1413dc793de04129e664fc5ca5aab0a383d90379c3a1d9a58ca6639ef0 39524 krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_arm64.deb 1af34cd742f03068d7e35cb6cf66c03f56beab48d2187088b3cc33cebf9f1b28 28944 krb5-gss-samples_1.21.3-5+deb13u1_arm64.deb 203b2c9597eeb4747e3c3a03a4a28e6e4ab9161ddb7ca4530d448fc6e5c243a7 19824 krb5-k5tls-dbgsym_1.21.3-5+deb13u1_arm64.deb 33f850df4d6b2d0958deee35fe6730f33f96445538c0e1b4c706606db3933f58 20588 krb5-k5tls_1.21.3-5+deb13u1_arm64.deb 3f72103504e720ec44dc7da2e2f4efa1eebd02105e9ab4f17f8f03b8035e8963 499836 krb5-kdc-dbgsym_1.21.3-5+deb13u1_arm64.deb e86e1a4d4d4cf7664dc70548e5bd33016b693245cb6d9c5df80ec04199dd72e7 191340 krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_arm64.deb 6060709de9fb0c38176c6f5f7cff430eb39470b6ebc4991237896de4afd985af 86868 krb5-kdc-ldap_1.21.3-5+deb13u1_arm64.deb 43329914d5743bb4a9ebb7e427a05e813c4515a59d18feaa7299e14aa10f2b2c 182040 krb5-kdc_1.21.3-5+deb13u1_arm64.deb a782c14a800dd496a1a5bc66c490e0e2b243e64d03919dcc4c70d46fe44447cf 43892 krb5-kpropd-dbgsym_1.21.3-5+deb13u1_arm64.deb c2a7fb073bda9cfd74052aa3980734db689b93c223c6b3b04a94b964f4a7b7c6 32072 krb5-kpropd_1.21.3-5+deb13u1_arm64.deb 9f5d65a069269b0960418f9d5a3110158234a1efbe9a9feb3650c57422fe41ef 126404 krb5-multidev_1.21.3-5+deb13u1_arm64.deb 3f6757ccc98e0fdfda58019ad54550792bdb0f2c0e2467e37faea90c697c6e1e 29032 krb5-otp-dbgsym_1.21.3-5+deb13u1_arm64.deb ba09164d4d93ca5855e10af403229ac921833aceb7cf139563a825c847e6fa62 22248 krb5-otp_1.21.3-5+deb13u1_arm64.deb 54523c2ad610dc0e163b6b31dcc63479c5135a39d7bf5cc27fab42775303aea1 157692 krb5-pkinit-dbgsym_1.21.3-5+deb13u1_arm64.deb bce67551c66bba63afaa221899df443e135493a50079f7c838b92ff6f2460fbf 55528 krb5-pkinit_1.21.3-5+deb13u1_arm64.deb 9e1f956b079b327be575382a96d3f6f48c1483ec666e08e178410a569c9b9d3d 203968 krb5-user-dbgsym_1.21.3-5+deb13u1_arm64.deb 7b8eec1e190e16d3e2383369991b282ab926d98cb95792da889435f8f8c66dae 117584 krb5-user_1.21.3-5+deb13u1_arm64.deb 51d5b0bfaea9398e4c22d5f1e7e345b206ea786ebbed5ad845d72df95a0c9fdf 16545 krb5_1.21.3-5+deb13u1_arm64-buildd.buildinfo 70803e8f5b9dd0a7167671bdd0b3cd05642384c1fc49e8270d340d85bf6c7d4c 127624 libgssapi-krb5-2_1.21.3-5+deb13u1_arm64.deb a25bfe3625a9f238d86945d12eca58c6e5201ff7cde596aac700dd12ac208bec 57192 libgssrpc4t64_1.21.3-5+deb13u1_arm64.deb 2453e8d4fa3b91b868d5bc10e84a15ad9c7bc4e4cb49379cb1f560bdce50db4a 81416 libk5crypto3_1.21.3-5+deb13u1_arm64.deb 96da21fca7d97b42d6be881e22648f842ecbe481ee9051d21279696f02170e31 41296 libkadm5clnt-mit12_1.21.3-5+deb13u1_arm64.deb 9e25c202e883de84c2c37d8cc10cadc8fd5538cd4227a1b9f4f160ece94756d6 53308 libkadm5srv-mit12_1.21.3-5+deb13u1_arm64.deb 169c3d2264a37097003051022e9596a6c2dc906fc8302ac0d95b566fcc00d9c3 41432 libkdb5-10t64_1.21.3-5+deb13u1_arm64.deb 09f23e8398be5799cc3e576c75e79fd9c64830cebde9230cacd2e04579f4ad10 16644 libkrad-dev_1.21.3-5+deb13u1_arm64.deb 5d16c6f977324e82cf6729e23d558ed4be1f54395ba8f6484f0874b689fc3818 25376 libkrad0_1.21.3-5+deb13u1_arm64.deb 1f5c46480abf894f662d894696c8a6c6510c2b20616cd453e88b27b11d3be25d 308256 libkrb5-3_1.21.3-5+deb13u1_arm64.deb f3bfaa9e51d1f7d7d9f5229892109f5c0e902f33d4262eac83eddc16ea7e319f 2139040 libkrb5-dbg_1.21.3-5+deb13u1_arm64.deb c7923bdb8babd38ab443b7e7aac56e5f094c8a9031dd4f392716a563510f676e 16192 libkrb5-dev_1.21.3-5+deb13u1_arm64.deb 6381bcb54e58854f9ebac2dfa580c3d6112d01b4ca3f725e7263b9374f79608e 32508 libkrb5support0_1.21.3-5+deb13u1_arm64.deb Files: 0ec699a0fe318b74da8d35e0d55e8a99 213516 debug optional krb5-admin-server-dbgsym_1.21.3-5+deb13u1_arm64.deb 39d7ec4f22a0fc7879b8431ede1fb535 91080 net optional krb5-admin-server_1.21.3-5+deb13u1_arm64.deb c93ad3e1221192f33d31f216ce7cc613 39524 debug optional krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_arm64.deb 7c30294b9cc7a4438c2fab0199543695 28944 net optional krb5-gss-samples_1.21.3-5+deb13u1_arm64.deb ea3664294cf964190b976b5b535f263a 19824 debug optional krb5-k5tls-dbgsym_1.21.3-5+deb13u1_arm64.deb 0bb93a4099adb54a3c224d189e481e70 20588 net optional krb5-k5tls_1.21.3-5+deb13u1_arm64.deb a442b4b5b20facd984424c5e6eee3e0b 499836 debug optional krb5-kdc-dbgsym_1.21.3-5+deb13u1_arm64.deb 4f42f57c54a620fe890d021546f34bb6 191340 debug optional krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_arm64.deb 159d742ee7cf0809991be75d26f607fd 86868 net optional krb5-kdc-ldap_1.21.3-5+deb13u1_arm64.deb 719d8d317d811345b96eae407bdcceaa 182040 net optional krb5-kdc_1.21.3-5+deb13u1_arm64.deb df8c8794d298a2e8172c8c5b101bb00c 43892 debug optional krb5-kpropd-dbgsym_1.21.3-5+deb13u1_arm64.deb 945980755a831a8defb4f6d8feac974d 32072 net optional krb5-kpropd_1.21.3-5+deb13u1_arm64.deb 4d17d9bcba7b6e4289ddcddf59e3bac4 126404 libdevel optional krb5-multidev_1.21.3-5+deb13u1_arm64.deb 76b701cbc12d2561420a8efdec6abe75 29032 debug optional krb5-otp-dbgsym_1.21.3-5+deb13u1_arm64.deb bef17bc6566a72f131e004f658e9a8e3 22248 net optional krb5-otp_1.21.3-5+deb13u1_arm64.deb 6d74541a1212da6e0d5babb4d1133669 157692 debug optional krb5-pkinit-dbgsym_1.21.3-5+deb13u1_arm64.deb 7789842b1924c3460d88f430eff12b60 55528 net optional krb5-pkinit_1.21.3-5+deb13u1_arm64.deb d7d53920e37f7e2491cdc84b043cbd66 203968 debug optional krb5-user-dbgsym_1.21.3-5+deb13u1_arm64.deb a5b612dadd58015582e2ffa4032c51e3 117584 net optional krb5-user_1.21.3-5+deb13u1_arm64.deb 1af57a0d06a13ae791cf20064dfe8d7d 16545 net optional krb5_1.21.3-5+deb13u1_arm64-buildd.buildinfo c6764c2e97c8a986f6d2ee2fd774876d 127624 libs optional libgssapi-krb5-2_1.21.3-5+deb13u1_arm64.deb acc9dc8bd8a40e4bca2cb13fbed3c26b 57192 libs optional libgssrpc4t64_1.21.3-5+deb13u1_arm64.deb c8bf0efa3716f167a27d7abebf37ed1e 81416 libs optional libk5crypto3_1.21.3-5+deb13u1_arm64.deb 780d0d1e0cb23d7ef34385f33aec85b6 41296 libs optional libkadm5clnt-mit12_1.21.3-5+deb13u1_arm64.deb 5d9f74c10fcfd2fde7e2de177e5de15c 53308 libs optional libkadm5srv-mit12_1.21.3-5+deb13u1_arm64.deb d6f8cb2654c93d96627e1f28667d6b7a 41432 libs optional libkdb5-10t64_1.21.3-5+deb13u1_arm64.deb 94961ccf1202f06704766a16754f3c20 16644 libdevel optional libkrad-dev_1.21.3-5+deb13u1_arm64.deb cd078baac016792ddf6f2c445ac06d37 25376 libs optional libkrad0_1.21.3-5+deb13u1_arm64.deb 11797c4ef48f45575581133a114f97ae 308256 libs optional libkrb5-3_1.21.3-5+deb13u1_arm64.deb 8d2e1283e670a814cb3c1e15be28b841 2139040 debug optional libkrb5-dbg_1.21.3-5+deb13u1_arm64.deb 20b08560b195cc02ba66e6e87fbda560 16192 libdevel optional libkrb5-dev_1.21.3-5+deb13u1_arm64.deb 45ad6610821eb7a7f7041f3ec8749cc7 32508 libs optional libkrb5support0_1.21.3-5+deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmoAi3YACgkQScpU3dYu lLjzHRAAo8tuAdXzQuTvVjiykR4k8MMg3pbO8wjBaNPf7wmZ8ku39J3AUl2Nb7Uw WyP0Y97O/7SOE/KxkDkmXuvx28oKP8yc5ScHMbacK1N9EHf2TUzcyDU/2Tdpvm5B rdOK+G3c7iOZ82NUmq2C2Hqi+TabqKulINswJEUPqXQdUpxa70D3q/pi1Ue+qIf9 TVisc/NadoG44LPdXAJvJsbLH6Ypq8qOYtRJ6MDNWmBB79Zo9q1nZDD8IHqTxPn1 DKyGdHw6zH8zc2z6lozAu3w2DjC8J31dKCePHaHiJQgt07vwvKlvD2nyKObVsDA6 B68uW24ySrux36IFSMVmdAxjio9zLrgB63/HN8I4CetxwC3T5KRffZGI64+LHleE lLBNXxxSkcmAN6k2pQwnfovWif+cknZizVTQBrqH/isNlyuGuNh2nnCWp20jX8VG CMsshHHzli71Dt7MZ+jbBeeoax4lXCLnD8ILxA1KTdlGS+i6MyuYqceLmZ4SO6+d ZSVznciUfshBs47nnGqDICYzLFHt/0TES74hR6cWVLdHQgwv7dBx6ldUAp/52IBC sZeTdpZTOs149cG5FSc3NI3pjnLhq7dpxt2aQsBAmbRnhftGSOuIBzQo+vVkpHyk 5C2ZGrZlarFYtcqjDd7QLRMYCPxxaRgFzP8qynPDiiZhKsw1h7c= =0ylX -----END PGP SIGNATURE-----