-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 May 2026 09:23:58 +0200 Source: krb5 Architecture: source Version: 1.20.1-2+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: Sam Hartman <hartmans@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1135317 Changes: krb5 (1.20.1-2+deb12u5) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) (Closes: #1135317) Checksums-Sha1: 6655dbff5f35427c8256ca03c11978e0f6d6111d 3982 krb5_1.20.1-2+deb12u5.dsc 21b192bf47f949506fba47a842b5947590a90aa0 112068 krb5_1.20.1-2+deb12u5.debian.tar.xz 4108b883e75f763f75b58d35de0647588e0b2e89 6239 krb5_1.20.1-2+deb12u5_source.buildinfo Checksums-Sha256: 643c1e56f5d2022f7685f5d5490a4fc348adc68a4bb42adbc1780e4a5b1bb05e 3982 krb5_1.20.1-2+deb12u5.dsc 195842a66252dfee21b3402b5048f8dea11ea92056742aedf71b356e26f4513f 112068 krb5_1.20.1-2+deb12u5.debian.tar.xz 167ab7c79dbd3faa7b09bc182ff458635525ac53c5748fd58f62c954edb02d7d 6239 krb5_1.20.1-2+deb12u5_source.buildinfo Files: d699542b2cc82980a13e88392e89ca32 3982 net optional krb5_1.20.1-2+deb12u5.dsc 013b61397378a929ef1ead73a9bd75af 112068 net optional krb5_1.20.1-2+deb12u5.debian.tar.xz 74f66e96cc1d25d0c868ed44d7c6ac59 6239 net optional krb5_1.20.1-2+deb12u5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmoAhCdfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EzGcP/3zr3WTi+elLZeZyKMLxGrJixL6oMGNs 3Rwm4CetGWxd8LshOwLoG3Rwimczv3km4gjDNfm+JNJ5vH4tjcgJp2i0k5DG3/SY b6Tki4YmlUlQ+pLpcJHg//tBvdmMroS/Rsv8ykJ9CzqKuNBuFkz0pavqGu6e5hbJ 31kX4+q6GJFpbLWE2uie/9zrY2Q/lOtryLbeDqoAGxmDtAXoMnm94h5RT77TqpBA oj8T6YZo4xzd/rlmOxneLLWMrV654P6DG6kXE45oMarVzrcu6GBQLXC14upYcgSI KpI6QUV5wRnSKkwsXwKen+9MFMvpf2140j1y03vYmtKciTPfddnBUKC0/g3daZW8 athbq/Mp826JU7NE0ObtmupfwhUVye/6wZ0UxP1h9XjuCjICAwpnNImHVKGRifwC yrSdlxNZ9kWKawJxFF7em0cnmj5uU8H0KMEKLTST0QYtSMyrkHntt2GpO+I7Xfwy rjG7K65w4hmTidNTuyhONyWgXzKwtJi+2bAIYXZFK21DoGOvZQ1ooxQA4n338R09 8qmp4f/jhexTT1rA+f0xuN4K9Upk7CK7MRBhaQN374Sv4bEAhb6aeVTCOWfZbGYw Y9rMznOdGINP3g7MDlpuAyJbII4vMmtpaf4zkysY0ySBM13ogig7qYty3xpZnM8M OcaiH96fCZDG =GXpR -----END PGP SIGNATURE-----