-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 May 2026 09:16:51 +0200 Source: krb5 Binary: krb5-admin-server krb5-admin-server-dbgsym krb5-gss-samples krb5-gss-samples-dbgsym krb5-k5tls krb5-k5tls-dbgsym krb5-kdc krb5-kdc-dbgsym krb5-kdc-ldap krb5-kdc-ldap-dbgsym krb5-kpropd krb5-kpropd-dbgsym krb5-multidev krb5-otp krb5-otp-dbgsym krb5-pkinit krb5-pkinit-dbgsym krb5-user krb5-user-dbgsym libgssapi-krb5-2 libgssrpc4t64 libk5crypto3 libkadm5clnt-mit12 libkadm5srv-mit12 libkdb5-10t64 libkrad-dev libkrad0 libkrb5-3 libkrb5-dbg libkrb5-dev libkrb5support0 Architecture: amd64 Version: 1.21.3-5+deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Salvatore Bonaccorso Description: krb5-admin-server - MIT Kerberos master server (kadmind) krb5-gss-samples - MIT Kerberos GSS Sample applications krb5-k5tls - TLS plugin for MIT Kerberos krb5-kdc - MIT Kerberos key server (KDC) krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin krb5-kpropd - MIT Kerberos key server (Slave KDC Support) krb5-multidev - development files for MIT Kerberos without Heimdal conflict krb5-otp - OTP plugin for MIT Kerberos krb5-pkinit - PKINIT plugin for MIT Kerberos krb5-user - basic programs to authenticate using MIT Kerberos libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism libgssrpc4t64 - MIT Kerberos runtime libraries - GSS enabled ONCRPC libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library libkadm5clnt-mit12 - MIT Kerberos runtime libraries - Administration Clients libkadm5srv-mit12 - MIT Kerberos runtime libraries - KDC and Admin Server libkdb5-10t64 - MIT Kerberos runtime libraries - Kerberos database libkrad-dev - MIT Kerberos RADIUS Library Development libkrad0 - MIT Kerberos runtime libraries - RADIUS library libkrb5-3 - MIT Kerberos runtime libraries libkrb5-dbg - debugging files for MIT Kerberos libkrb5-dev - headers and development libraries for MIT Kerberos libkrb5support0 - MIT Kerberos runtime libraries - Support library Closes: 1135317 Changes: krb5 (1.21.3-5+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) (Closes: #1135317) Checksums-Sha1: 6b34724d4187c5fc3d85281d797e0abdf326199b 215060 krb5-admin-server-dbgsym_1.21.3-5+deb13u1_amd64.deb 2e7a4cac9cc51b489f09d7fe290d3507153bedf5 95188 krb5-admin-server_1.21.3-5+deb13u1_amd64.deb cc7535aa7a544aa9f671e884dd4f84acb1ea98b6 38568 krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_amd64.deb d840dcf7057140d94ff9a62311b8884adfffa735 29588 krb5-gss-samples_1.21.3-5+deb13u1_amd64.deb 404f9660e7844a40cf0e16a9d251c1aaa9c98b31 19412 krb5-k5tls-dbgsym_1.21.3-5+deb13u1_amd64.deb 3aaba3082b1ca0f211e30fa68d377184a774cb50 20512 krb5-k5tls_1.21.3-5+deb13u1_amd64.deb 59b70e74e606393bad31b103b6ea2e7cb195916a 508660 krb5-kdc-dbgsym_1.21.3-5+deb13u1_amd64.deb b4c60277ea9a3cc2051fcf6c578fc56f1ed44792 193608 krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_amd64.deb 9549fcdfe3915bbc064f519c4ef1793e9e011bcc 89732 krb5-kdc-ldap_1.21.3-5+deb13u1_amd64.deb 2191c4293630d49fbcfb403657d11cda4963a304 190828 krb5-kdc_1.21.3-5+deb13u1_amd64.deb ab28bd486c710d4c8940bf0c473bd5c4203b623c 43604 krb5-kpropd-dbgsym_1.21.3-5+deb13u1_amd64.deb e4723a0e1f3199ea91fcb04a3d623a89da05f47c 32684 krb5-kpropd_1.21.3-5+deb13u1_amd64.deb 55302201411fe60b24a9760f699dbf05fedb8754 126392 krb5-multidev_1.21.3-5+deb13u1_amd64.deb bb0bf816536ebf7630745e321a80ff8d3d0d9c1b 29216 krb5-otp-dbgsym_1.21.3-5+deb13u1_amd64.deb f65815a421c9da5c089d1e7b8aebbaf173fb0f36 22668 krb5-otp_1.21.3-5+deb13u1_amd64.deb 046903ddd4793cf7bb08e5ec6a85bcc6d2f2aabb 158864 krb5-pkinit-dbgsym_1.21.3-5+deb13u1_amd64.deb 6d6beef477f5486e8b371f081a03fed5f6fddab9 59308 krb5-pkinit_1.21.3-5+deb13u1_amd64.deb ebf7e9d1496f5ac20229c2ae0babef8366ad0217 202640 krb5-user-dbgsym_1.21.3-5+deb13u1_amd64.deb 7dc675da57635a333cf5856616fefba6018d74e8 120080 krb5-user_1.21.3-5+deb13u1_amd64.deb c9f2e620f854e425c0af2df8df5b441447cccddf 16558 krb5_1.21.3-5+deb13u1_amd64-buildd.buildinfo ddecd0f8bcc988780e6e7811c9c25e68e776b386 138356 libgssapi-krb5-2_1.21.3-5+deb13u1_amd64.deb 3e0610e3b6f6d57539344d7a1f95da1ed442fd48 60132 libgssrpc4t64_1.21.3-5+deb13u1_amd64.deb 59b80ae0af88c085973d19dd8e321815455e70e6 81152 libk5crypto3_1.21.3-5+deb13u1_amd64.deb 64500bec63771ac0a9d2ae023dcca492449d4046 42648 libkadm5clnt-mit12_1.21.3-5+deb13u1_amd64.deb 702103741c2faa85caf66917f3ea762e17891137 54440 libkadm5srv-mit12_1.21.3-5+deb13u1_amd64.deb 1f3d85ab7aca5a5c13467a1bd5d90e41e4da1241 42788 libkdb5-10t64_1.21.3-5+deb13u1_amd64.deb 12f348baa51250060b594e3cba4290ff88dc1d0f 16644 libkrad-dev_1.21.3-5+deb13u1_amd64.deb 0b5601205981dd12b018051f172e68189b2b8dd9 25712 libkrad0_1.21.3-5+deb13u1_amd64.deb 53d94056269d541890f7e1bc61b4face03061af6 326056 libkrb5-3_1.21.3-5+deb13u1_amd64.deb f2fc4b8b68b574ca2705c0527d41abcf7ce29339 2203756 libkrb5-dbg_1.21.3-5+deb13u1_amd64.deb 4fef5fafa9bcf0df24e4cc6ad971283da129ffa7 16204 libkrb5-dev_1.21.3-5+deb13u1_amd64.deb fdcbf424c12036172b67ed2d13d14fa441fb3736 33124 libkrb5support0_1.21.3-5+deb13u1_amd64.deb Checksums-Sha256: ec16e8e795fad6d8296067c9ecb3311a4311ce79bdd698e1fc8462d8b19b982c 215060 krb5-admin-server-dbgsym_1.21.3-5+deb13u1_amd64.deb 40a6668be1d7de8b45305ac0f3568ae9f1ed9520ce457ff00b0a5fac77ffd1d6 95188 krb5-admin-server_1.21.3-5+deb13u1_amd64.deb 430d8acd5b9d5d47d3f48a4f786fb03cc02f8d662ddfbf98d13e8be4cc5ab7b2 38568 krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_amd64.deb 1f7b393a72d1d8f880490a494d67de03fe858e8daf0d5655ec7c23b9fbfb8099 29588 krb5-gss-samples_1.21.3-5+deb13u1_amd64.deb d70c0549f1a50dab287ccdf036d22b39549f4117c8daeec4cf7a6b28e768474a 19412 krb5-k5tls-dbgsym_1.21.3-5+deb13u1_amd64.deb ffb37fd1f632c5dab177c45a6917a4343362e074a842b36b8f108b6694c19c46 20512 krb5-k5tls_1.21.3-5+deb13u1_amd64.deb 0e69a0f3d718d04896e00eba5acecb892456a3f98d39c7e1c0bccb82aaca4d25 508660 krb5-kdc-dbgsym_1.21.3-5+deb13u1_amd64.deb 0d1bccee87504bb79831336a79d3a86d1cd2ede4cd0a982551446df2df6da6c6 193608 krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_amd64.deb fa93fb36aced9ff9f8882ea5d3534efd2b0372b72d7c7f157482cc925adbbb40 89732 krb5-kdc-ldap_1.21.3-5+deb13u1_amd64.deb 5533f05f8d20cee3e5441b5934f131a3b5b0487c7c1818680f175cbe8c7ea7c1 190828 krb5-kdc_1.21.3-5+deb13u1_amd64.deb 5a6b461c058ac3f8866bf35600d775d4b86dca07042420d975e0267ba832e54b 43604 krb5-kpropd-dbgsym_1.21.3-5+deb13u1_amd64.deb 944cbcb699d7c47e9954fe03b74bb3b62f78f9e5f4c135cdcd166d79090639bf 32684 krb5-kpropd_1.21.3-5+deb13u1_amd64.deb 8f8735ab56020070d8d448c13d214f6d6ba5a2c1d4661b24fa3ba63491cb3f80 126392 krb5-multidev_1.21.3-5+deb13u1_amd64.deb e112b29277b386ad182bba837863b47d229da87732c67afbac0ee597530c4286 29216 krb5-otp-dbgsym_1.21.3-5+deb13u1_amd64.deb 274ac177f8f641d9bd2452dc91f48f710c5c41391b32811566e5d8987472e04b 22668 krb5-otp_1.21.3-5+deb13u1_amd64.deb 09575842d94d8d6aa015b2b68e71e3575a48508b4ce82f44729c3f7a971272a7 158864 krb5-pkinit-dbgsym_1.21.3-5+deb13u1_amd64.deb cda1731e67f799007fb1e19af14bad9707f8fb6843e2081a217d93b227c7a831 59308 krb5-pkinit_1.21.3-5+deb13u1_amd64.deb 839986901e2aab26ef629e8152ef53facd90431d1f91e89719760990ea4a9afa 202640 krb5-user-dbgsym_1.21.3-5+deb13u1_amd64.deb dedac19418718f9db1a951be2967e77410f17898c0300b5c341bb37b841de72b 120080 krb5-user_1.21.3-5+deb13u1_amd64.deb 97d45cf4cc4473ce974677ef5222f21c55a38031075261a3577509c48ef33098 16558 krb5_1.21.3-5+deb13u1_amd64-buildd.buildinfo 30847c1fde4240567d7ed3aeab4f655dd591203758b857e85e824045aae70299 138356 libgssapi-krb5-2_1.21.3-5+deb13u1_amd64.deb ff88e52a6b6599851f3d44f7223f15123d9e5a0b02ed9a308c05c31fa88f7d73 60132 libgssrpc4t64_1.21.3-5+deb13u1_amd64.deb 7da07ee674b47f1f0be7cc89317c25310086a1f1761217d0f72e6ae2c5a69b84 81152 libk5crypto3_1.21.3-5+deb13u1_amd64.deb 9d1271f9ef8d3d308e1d9373cccc59de0e2b2b62b0ddd39cffd76cb18af24bb2 42648 libkadm5clnt-mit12_1.21.3-5+deb13u1_amd64.deb ab608b7692bcb980957c2dc83da291fa58e065955fdc6c0882c66d26502693ca 54440 libkadm5srv-mit12_1.21.3-5+deb13u1_amd64.deb d6d4ec516fe87c545862b117bc5cec294cabf06319c400720ec6c01bc215b79f 42788 libkdb5-10t64_1.21.3-5+deb13u1_amd64.deb dfff67b45490b6dc4212141f2d4e58da88f6f2795fcb52d46d74584159ce7a4b 16644 libkrad-dev_1.21.3-5+deb13u1_amd64.deb 8a4c24c38131723819bbf9d075e3d119bb8b96aef832e6eaa16a39d643b13201 25712 libkrad0_1.21.3-5+deb13u1_amd64.deb 47d71d6a7f2e59b9bae5f89602397594805113b95889ad18fa703cd53abafc97 326056 libkrb5-3_1.21.3-5+deb13u1_amd64.deb 5379d94660eac23db0428c79895129c6bcf5046a3b1ac727301ad5ae378f608c 2203756 libkrb5-dbg_1.21.3-5+deb13u1_amd64.deb 62c3dbd746163878e73e22206d1dcc01f0f5296d3ca4ece5fb8cb7cb80396e4f 16204 libkrb5-dev_1.21.3-5+deb13u1_amd64.deb 3a0acd8b37955c0e102c756b52c97df2a31f67b96453c35dab70df218d309117 33124 libkrb5support0_1.21.3-5+deb13u1_amd64.deb Files: 5e816b1722d547c9b54c37bbb327d22c 215060 debug optional krb5-admin-server-dbgsym_1.21.3-5+deb13u1_amd64.deb f5921d55e96c733d11677130fa7c83a0 95188 net optional krb5-admin-server_1.21.3-5+deb13u1_amd64.deb f873866cf83d9780ab28c5b38b99844f 38568 debug optional krb5-gss-samples-dbgsym_1.21.3-5+deb13u1_amd64.deb 7833367aec6fd7fb27d0e3d63890c90d 29588 net optional krb5-gss-samples_1.21.3-5+deb13u1_amd64.deb 0523451cd1701f6371b72c99fc22713a 19412 debug optional krb5-k5tls-dbgsym_1.21.3-5+deb13u1_amd64.deb 82494208dde134403356e8ea201c9904 20512 net optional krb5-k5tls_1.21.3-5+deb13u1_amd64.deb 8ede8458f0331cf64d61bdb2296760aa 508660 debug optional krb5-kdc-dbgsym_1.21.3-5+deb13u1_amd64.deb ef073e61419d5e69b0bdce4930f17348 193608 debug optional krb5-kdc-ldap-dbgsym_1.21.3-5+deb13u1_amd64.deb 51b8e6522a7c33560ef6b6841f63192c 89732 net optional krb5-kdc-ldap_1.21.3-5+deb13u1_amd64.deb e0fe880e31eacc215c4d4b35f2a6e8f4 190828 net optional krb5-kdc_1.21.3-5+deb13u1_amd64.deb 30023db67fde954d440e949e66df57de 43604 debug optional krb5-kpropd-dbgsym_1.21.3-5+deb13u1_amd64.deb d83b933a2200448f8f967170b8a0209e 32684 net optional krb5-kpropd_1.21.3-5+deb13u1_amd64.deb 390f08a1f90c7ef0cd749015647f7ff8 126392 libdevel optional krb5-multidev_1.21.3-5+deb13u1_amd64.deb 36bb77f329b5efa19845f615a2d2fcec 29216 debug optional krb5-otp-dbgsym_1.21.3-5+deb13u1_amd64.deb fe121797e3b00a729b6a54dc50eb0ecb 22668 net optional krb5-otp_1.21.3-5+deb13u1_amd64.deb f975c80499107c2fb346d85e24486053 158864 debug optional krb5-pkinit-dbgsym_1.21.3-5+deb13u1_amd64.deb 279ee3ac8c6b3ebceb2a5d24fabc16b5 59308 net optional krb5-pkinit_1.21.3-5+deb13u1_amd64.deb d9c65576a69aafb3bf5fb8ba1cf9e3b2 202640 debug optional krb5-user-dbgsym_1.21.3-5+deb13u1_amd64.deb 1eb3b66ba20ac25d373b24c650883e64 120080 net optional krb5-user_1.21.3-5+deb13u1_amd64.deb b1a5fbe63ef432b7208161960eaa32ce 16558 net optional krb5_1.21.3-5+deb13u1_amd64-buildd.buildinfo 9d93b5d1adb11eec662012c1b7dcd33b 138356 libs optional libgssapi-krb5-2_1.21.3-5+deb13u1_amd64.deb ff9f1d93cd79961eabcb1c4334177412 60132 libs optional libgssrpc4t64_1.21.3-5+deb13u1_amd64.deb 96cdff8aed6de85e2ac31dc1513207ba 81152 libs optional libk5crypto3_1.21.3-5+deb13u1_amd64.deb 8b5dc6b0b79ee8260f7c94a16302a5f8 42648 libs optional libkadm5clnt-mit12_1.21.3-5+deb13u1_amd64.deb f25c0b43662b62b037a0275535d973a5 54440 libs optional libkadm5srv-mit12_1.21.3-5+deb13u1_amd64.deb 1d8834fcd3d4f72276f07b4d400b2e1e 42788 libs optional libkdb5-10t64_1.21.3-5+deb13u1_amd64.deb 3ea38462ebef1e09d539f94e1b594ce3 16644 libdevel optional libkrad-dev_1.21.3-5+deb13u1_amd64.deb f3a0f4832e612c204f3181dc3474728e 25712 libs optional libkrad0_1.21.3-5+deb13u1_amd64.deb c79f19d86512fadcbff5efa5317c23fb 326056 libs optional libkrb5-3_1.21.3-5+deb13u1_amd64.deb 3d532214089bf7479e852848e27c4707 2203756 debug optional libkrb5-dbg_1.21.3-5+deb13u1_amd64.deb a94f101462154da80f761f9c50a23c43 16204 libdevel optional libkrb5-dev_1.21.3-5+deb13u1_amd64.deb 20061bfd85a525d45bdce33e5300c43c 33124 libs optional libkrb5support0_1.21.3-5+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmoAjBkACgkQTwt/65ON 6zcDZw/+PHHq9IF+PqSI8a2aKDfCuOGpTeRDmXTNi/g5yKim2wcuR6uUH3l9ej0N D9q52jeE2pr4ALR6MDsj/FZo24mooR7D4Ur6KO9PKoTx+SDO+SUzfZSTT9D+DZtn RWIY+K5An3PgKtG5RctQIC8xOO+iafVwo0qa8nhHiMNgT6MWBuDRIye/mquPON39 aghTlw6+z612Pnm9n3G6QR1HlScL3SmHGx9KGGr2hMwUF4ZesDsEKLQuWTum+XSC EiTe2CLuiijTVrfjd82PAVxovHChVrxzPYvS/Z4v/WWGDkP2S1M9noNCK4nKQbx9 uz54dwrYdd3wMneMzjK/WZPhpaXWFIvUBKP0FqDBjOyJSwABX9WXPp/yeKWD0yX/ kPLP2ign7FdMFEPL25rUb1g+bzm6f+fivIyuRe3gXV1hYYknPoHFU2faQe1448WC ZvMcbRtJvmpHHj3ZgkxCxPWpXt2CIPyy/tNVP+vANbcIrzG1U57Im6Dqy01TWGAn xlXxatYXQCrLJ5IXZWrB4UN50FBROm5GLpkTfT9uNztFxkqeLEUPoy24o/fTbkYU TzO1M3MtriiksnJnzK41cwIkrgYrItJYMgonqsEMagFum3fhfQq0dVK3oOo6vUlO LRsjU40pWseYJnxaLh4Kgur2ElUrB6CfKeFBUABiih/QcW86NHo= =WkfA -----END PGP SIGNATURE-----