-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 09:16:51 +0200
Source: krb5
Binary: krb5-admin-server krb5-admin-server-dbgsym krb5-gss-samples krb5-gss-samples-dbgsym krb5-k5tls krb5-k5tls-dbgsym krb5-kdc krb5-kdc-dbgsym krb5-kdc-ldap krb5-kdc-ldap-dbgsym krb5-kpropd krb5-kpropd-dbgsym krb5-multidev krb5-otp krb5-otp-dbgsym krb5-pkinit krb5-pkinit-dbgsym krb5-user krb5-user-dbgsym libgssapi-krb5-2 libgssrpc4t64 libk5crypto3 libkadm5clnt-mit12 libkadm5srv-mit12 libkdb5-10t64 libkrad-dev libkrad0 libkrb5-3 libkrb5-dbg libkrb5-dev libkrb5support0
Architecture: i386
Version: 1.21.3-5+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-gss-samples - MIT Kerberos GSS Sample applications
 krb5-k5tls - TLS plugin for MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
 krb5-kpropd - MIT Kerberos key server (Slave KDC Support)
 krb5-multidev - development files for MIT Kerberos without Heimdal conflict
 krb5-otp   - OTP plugin for MIT Kerberos
 krb5-pkinit - PKINIT plugin for MIT Kerberos
 krb5-user  - basic programs to authenticate using MIT Kerberos
 libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
 libgssrpc4t64 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
 libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
 libkadm5clnt-mit12 - MIT Kerberos runtime libraries - Administration Clients
 libkadm5srv-mit12 - MIT Kerberos runtime libraries - KDC and Admin Server
 libkdb5-10t64 - MIT Kerberos runtime libraries - Kerberos database
 libkrad-dev - MIT Kerberos RADIUS Library Development
 libkrad0   - MIT Kerberos runtime libraries - RADIUS library
 libkrb5-3  - MIT Kerberos runtime libraries
 libkrb5-dbg - debugging files for MIT Kerberos
 libkrb5-dev - headers and development libraries for MIT Kerberos
 libkrb5support0 - MIT Kerberos runtime libraries - Support library
Closes: 1135317
Changes:
 krb5 (1.21.3-5+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
     (Closes: #1135317)
Checksums-Sha1:
 ba8297dbf15abdfcb50ad11e48b1f50f329f93d4 190572 krb5-admin-server-dbgsym_1.21.3-5+deb13u1_i386.deb
 3901a460960a58c9a450388c4e7b9f7dbd6e5deb 98412 krb5-admin-server_1.21.3-5+deb13u1_i386.deb
 b0722cf1ff5d434fb287577eb5e8405083d1a008 35680 krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_i386.deb
 c401085f7bc6e4a6dd42c06e7a1ef5cdcdb671ed 30024 krb5-gss-samples_1.21.3-5+deb13u1_i386.deb
 a65c0d9d33a745de8ed45fe55f9e493d1d881b7f 18464 krb5-k5tls-dbgsym_1.21.3-5+deb13u1_i386.deb
 726284a310faa4cf44e1b20cc549c1b5ec921160 20928 krb5-k5tls_1.21.3-5+deb13u1_i386.deb
 f13de538f710cb1a905af2af0bfbb79ab1c506e1 450752 krb5-kdc-dbgsym_1.21.3-5+deb13u1_i386.deb
 aac7db75d5cb137a766c96e0327137d135c9382d 173064 krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_i386.deb
 72e91a7e1b111afb4076ff48e0eacc6b99568698 94896 krb5-kdc-ldap_1.21.3-5+deb13u1_i386.deb
 0e6740443f88bdc07cbf0c047333132dee378c53 201984 krb5-kdc_1.21.3-5+deb13u1_i386.deb
 666f9e24d814eaa76d03c5194e60443ec4bdf9ca 41496 krb5-kpropd-dbgsym_1.21.3-5+deb13u1_i386.deb
 fdee74331439f87153bcc304288bdc7ce79e34c2 33340 krb5-kpropd_1.21.3-5+deb13u1_i386.deb
 9d43ed20558e42afc917e2a91073a63c7a75bc8f 126388 krb5-multidev_1.21.3-5+deb13u1_i386.deb
 52fea65a57ad9a403891462cb8d034a419be8540 27216 krb5-otp-dbgsym_1.21.3-5+deb13u1_i386.deb
 ced50ef88df0d2a8e7d1b41f4e53a6bb89789d32 23504 krb5-otp_1.21.3-5+deb13u1_i386.deb
 ab46e8076fe3b5822b4a9206d9c2f8bf3e34a56b 138696 krb5-pkinit-dbgsym_1.21.3-5+deb13u1_i386.deb
 7da38fbf0083ffc72e31358a35c942c8ca0c5095 64284 krb5-pkinit_1.21.3-5+deb13u1_i386.deb
 1e1373797d0cbc25a34ff434cd008ca1d923cf3d 178776 krb5-user-dbgsym_1.21.3-5+deb13u1_i386.deb
 6dd0bca4bb19b365a37c2c4d422c0171e668939a 122340 krb5-user_1.21.3-5+deb13u1_i386.deb
 5e9e7906a3b48ce80bbf8e0d36d1134c677eef6d 16372 krb5_1.21.3-5+deb13u1_i386-buildd.buildinfo
 a79e790470a852f55740bf62da44d0cf67ee8f3e 149312 libgssapi-krb5-2_1.21.3-5+deb13u1_i386.deb
 7a37fef077ca5815ee741451a2629d54b581fdf0 63636 libgssrpc4t64_1.21.3-5+deb13u1_i386.deb
 d11352a4f5d057cfbe2230831a9ce879ad59e752 84124 libk5crypto3_1.21.3-5+deb13u1_i386.deb
 451f5e76b16023e487034813703c6d6d9da603f5 44372 libkadm5clnt-mit12_1.21.3-5+deb13u1_i386.deb
 e221370de0d54260ffae2701cece30144163017c 58008 libkadm5srv-mit12_1.21.3-5+deb13u1_i386.deb
 973a810b167fcbe40235dcd9297d2f7ba1ea9f72 45748 libkdb5-10t64_1.21.3-5+deb13u1_i386.deb
 951d94e7660d504d02f3bf1b21b687afff17291c 16640 libkrad-dev_1.21.3-5+deb13u1_i386.deb
 0eae33d0dedc9d0086a32e85d31f780711e37f28 26608 libkrad0_1.21.3-5+deb13u1_i386.deb
 cc03a3378cb8a3ffea4c8b0d760f5026254f58a9 354600 libkrb5-3_1.21.3-5+deb13u1_i386.deb
 332eeff3fba5bad474f7b424c5951f3febdc185a 1937848 libkrb5-dbg_1.21.3-5+deb13u1_i386.deb
 2318e185cce72057e9b9bc5e15b98d1d0c4efeff 16180 libkrb5-dev_1.21.3-5+deb13u1_i386.deb
 efde8d83cc255b903a54278db913e1ecc6205682 35452 libkrb5support0_1.21.3-5+deb13u1_i386.deb
Checksums-Sha256:
 ef5a4eedee053db622c76bd86720df295e797526c07479f8f411688511655a12 190572 krb5-admin-server-dbgsym_1.21.3-5+deb13u1_i386.deb
 1ca2ca9845b37b5fab99a3ad4b4ca44d71c02755cb9bdbe700d5730e202adbfd 98412 krb5-admin-server_1.21.3-5+deb13u1_i386.deb
 8c11dcc6b49cf10191cfc2d3fcd614d0bce9f8b431f36ef2e793c524470a89ed 35680 krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_i386.deb
 d22428ceee40525b506f001e210060e78ee5d36d849d9d07c9f8eea4f8674c12 30024 krb5-gss-samples_1.21.3-5+deb13u1_i386.deb
 84d18a6dc74bc19f56182a50144e8bfaa75aa4cd38137aef93ccc80b888ca962 18464 krb5-k5tls-dbgsym_1.21.3-5+deb13u1_i386.deb
 9ff1f7959bbf976604bc822022461be10bac11c23a4eb81f325856215c1d3177 20928 krb5-k5tls_1.21.3-5+deb13u1_i386.deb
 62e6d44ce33884a19c831cdcd86390f201cb2cb4c6721f1d67f7074e4057c3fd 450752 krb5-kdc-dbgsym_1.21.3-5+deb13u1_i386.deb
 0294a7f468c0436a4994d169b0dbde6e395fd763a7fd42b7116b18fb7de1b30e 173064 krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_i386.deb
 b53c6a64cfe86c286b2608febb33fd6413a35242c0492b2f55f37d12c8d4c2f2 94896 krb5-kdc-ldap_1.21.3-5+deb13u1_i386.deb
 86e22e987e15f8da62591f715d4e72fa2c0a84ee7fafa30f0d5af2635b79320f 201984 krb5-kdc_1.21.3-5+deb13u1_i386.deb
 1959c25fec1b2d1290b31b8f8885acfc030f045dd7442bb6c27114df4b3dddea 41496 krb5-kpropd-dbgsym_1.21.3-5+deb13u1_i386.deb
 60b5c033224f2be4edfb5d53d050df0d07df177fc5a3a7bf71ce555257c36f59 33340 krb5-kpropd_1.21.3-5+deb13u1_i386.deb
 5979e4d89ed2b8e46817ffe0601e2434be6dbf34c2147c967b920917d02e31a3 126388 krb5-multidev_1.21.3-5+deb13u1_i386.deb
 39c8220fce976f9178a41225fa0bdaa4ce2a19f9d7e7a0af742b9404f5b15d93 27216 krb5-otp-dbgsym_1.21.3-5+deb13u1_i386.deb
 0be0675175085272e2dcd1523d304d1df3990ea2d587a9f0fcee60156a9025fd 23504 krb5-otp_1.21.3-5+deb13u1_i386.deb
 b0c7b9010daa0c3cbfe230d583f50d842c68d09706de38322402fbd661bef3fa 138696 krb5-pkinit-dbgsym_1.21.3-5+deb13u1_i386.deb
 48ad6b912b4cc21d44c336fa2867453c0deb9cd684c196300f4ba55649d1b528 64284 krb5-pkinit_1.21.3-5+deb13u1_i386.deb
 4d46be49a434763a282e777a2394c9dd52cf45b51c14d1a4227f415aeabc661c 178776 krb5-user-dbgsym_1.21.3-5+deb13u1_i386.deb
 21e7a968f37f4f72c699f182fa23a9ae1abd8134500ee968d9161e64fe4a93e4 122340 krb5-user_1.21.3-5+deb13u1_i386.deb
 9a2a06d1897c7ffaa0ca7791986d3a9ccdf740678f45bf5408a7efff85436004 16372 krb5_1.21.3-5+deb13u1_i386-buildd.buildinfo
 d211e7815c8c7343936ad32920fab5eb476b606d868451f978fc995e305751db 149312 libgssapi-krb5-2_1.21.3-5+deb13u1_i386.deb
 d0b2b34843628c2a1362125129bcf420222f996418018916f8551284dd4c5a19 63636 libgssrpc4t64_1.21.3-5+deb13u1_i386.deb
 2b7baf4667e5e090eadf8bb039973ab553989b464d1dba04c0c2b2c78d988c1c 84124 libk5crypto3_1.21.3-5+deb13u1_i386.deb
 7f3608f445d9ba635ff632d1bd819c0beb3142fafb1dc09a4b9ce267cef606c4 44372 libkadm5clnt-mit12_1.21.3-5+deb13u1_i386.deb
 ce56821411042ea938113c86505cc8271c89f93967cf0a97e7cee64dceabe000 58008 libkadm5srv-mit12_1.21.3-5+deb13u1_i386.deb
 94e10e925edb0236eee7db50f204720dfee0def69f5317e279cc0f25dd7389fc 45748 libkdb5-10t64_1.21.3-5+deb13u1_i386.deb
 6f3dfe2fd48787f81bb3c86da6c6bf4ea28624b7194d1cbdada64cca9852ffe7 16640 libkrad-dev_1.21.3-5+deb13u1_i386.deb
 9e0d686983f962ab83cbd4fefbdb1a031b0ea2bda7552f45f4ec2976daa26bf8 26608 libkrad0_1.21.3-5+deb13u1_i386.deb
 baae87f24ca36525bd20ae079d5de349ab2df1cce066e4c952cfd50934f6e179 354600 libkrb5-3_1.21.3-5+deb13u1_i386.deb
 41ba6eef8ce8fa85144786760c4e3f7df9e80fb17052537fc195778d27cf3dc5 1937848 libkrb5-dbg_1.21.3-5+deb13u1_i386.deb
 24c8e91a0c25145faec87685cf16328c8d5afc0d4a370506c120da428abd4a83 16180 libkrb5-dev_1.21.3-5+deb13u1_i386.deb
 d48c9a178c6d123f30cb8721913553a755ceb8d0b30e280115aa14c35e300772 35452 libkrb5support0_1.21.3-5+deb13u1_i386.deb
Files:
 38cfcd4b777ff788b0a38fa450aae4f2 190572 debug optional krb5-admin-server-dbgsym_1.21.3-5+deb13u1_i386.deb
 ab641ce53982f74beec98d6f6250d34c 98412 net optional krb5-admin-server_1.21.3-5+deb13u1_i386.deb
 a986921dedff1b08defc17354babc32e 35680 debug optional krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_i386.deb
 b5164d108ebec60bb7c1ab9c9cd2421c 30024 net optional krb5-gss-samples_1.21.3-5+deb13u1_i386.deb
 ebc3b95be377a012e10b55f3dfd66218 18464 debug optional krb5-k5tls-dbgsym_1.21.3-5+deb13u1_i386.deb
 49d94eb4fc35f710806e964a149b1409 20928 net optional krb5-k5tls_1.21.3-5+deb13u1_i386.deb
 603801d41b0128dccda039afbd7188a8 450752 debug optional krb5-kdc-dbgsym_1.21.3-5+deb13u1_i386.deb
 bf034be875951b6dac3ec17bfd48cc5b 173064 debug optional krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_i386.deb
 47b7f26d94272fabab704fa0f0813e53 94896 net optional krb5-kdc-ldap_1.21.3-5+deb13u1_i386.deb
 9b39dbff18863d900bc814355122f311 201984 net optional krb5-kdc_1.21.3-5+deb13u1_i386.deb
 290b67d2ec4e3c4c8a0c7e43b351a218 41496 debug optional krb5-kpropd-dbgsym_1.21.3-5+deb13u1_i386.deb
 6259b60707534f4997fd173e57e50288 33340 net optional krb5-kpropd_1.21.3-5+deb13u1_i386.deb
 7dfce4a9a5b36fdfcc98e520f9155646 126388 libdevel optional krb5-multidev_1.21.3-5+deb13u1_i386.deb
 54fec648963a2e6c4e2193fc1a08012a 27216 debug optional krb5-otp-dbgsym_1.21.3-5+deb13u1_i386.deb
 1d711e594257bec814e4792743e7dd68 23504 net optional krb5-otp_1.21.3-5+deb13u1_i386.deb
 d80fa535cd42cdc9569dbf232399e29f 138696 debug optional krb5-pkinit-dbgsym_1.21.3-5+deb13u1_i386.deb
 930c99e55d28ff47c4d736a48d175e52 64284 net optional krb5-pkinit_1.21.3-5+deb13u1_i386.deb
 7e6b63252a83aed2c52932ee3e1c6b4c 178776 debug optional krb5-user-dbgsym_1.21.3-5+deb13u1_i386.deb
 24ee22ce4310634e66cfa3e52170cea3 122340 net optional krb5-user_1.21.3-5+deb13u1_i386.deb
 7ce26c210107c631791bb1ddc27cc8ed 16372 net optional krb5_1.21.3-5+deb13u1_i386-buildd.buildinfo
 bc74b6b532c1d22cf8b098792c42bb92 149312 libs optional libgssapi-krb5-2_1.21.3-5+deb13u1_i386.deb
 2db5c64a32d2e766d0f493bd8b6bd9a3 63636 libs optional libgssrpc4t64_1.21.3-5+deb13u1_i386.deb
 c19d6b872bdd4e871d69e91cb664f6ee 84124 libs optional libk5crypto3_1.21.3-5+deb13u1_i386.deb
 a1fb8fce05ceb3be5dc421e61ae062c2 44372 libs optional libkadm5clnt-mit12_1.21.3-5+deb13u1_i386.deb
 22e01f776483636e00b716b28cf80068 58008 libs optional libkadm5srv-mit12_1.21.3-5+deb13u1_i386.deb
 6fd43b5f7876f0c8727a71e3b4c73bf6 45748 libs optional libkdb5-10t64_1.21.3-5+deb13u1_i386.deb
 80bee7a0c038161a0b1d82d76ff7b5db 16640 libdevel optional libkrad-dev_1.21.3-5+deb13u1_i386.deb
 980ac971201b9c40ecceadaa4462a6c5 26608 libs optional libkrad0_1.21.3-5+deb13u1_i386.deb
 f7411e76cfd403c441641786608b059e 354600 libs optional libkrb5-3_1.21.3-5+deb13u1_i386.deb
 55650a30cff2e49f82b8ed29c1bb8b6d 1937848 debug optional libkrb5-dbg_1.21.3-5+deb13u1_i386.deb
 a8e5fe0b16e5b65192dca8557b07cd01 16180 libdevel optional libkrb5-dev_1.21.3-5+deb13u1_i386.deb
 17104168fdebda4d335a3122f1c278c6 35452 libs optional libkrb5support0_1.21.3-5+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=FeCa
-----END PGP SIGNATURE-----