-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 09:23:58 +0200
Source: krb5
Binary: krb5-doc krb5-locales
Architecture: all
Version: 1.20.1-2+deb12u5
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 krb5-doc   - documentation for MIT Kerberos
 krb5-locales - internationalization support for MIT Kerberos
Closes: 1135317
Changes:
 krb5 (1.20.1-2+deb12u5) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
     (Closes: #1135317)
Checksums-Sha1:
 142b0447016b921ef07a115309e0ee2e3220254a 2792436 krb5-doc_1.20.1-2+deb12u5_all.deb
 9e55425c5d49a349009e832ab47b8c719fe7d5d0 63520 krb5-locales_1.20.1-2+deb12u5_all.deb
 609ab7c8c9257ef8d6b2c49f8e26f505aba5bfc4 12156 krb5_1.20.1-2+deb12u5_all-buildd.buildinfo
Checksums-Sha256:
 d3ca67a170929d0017a56bd1bae21500bbbca273ccf1b4a4986f4fa80913cf88 2792436 krb5-doc_1.20.1-2+deb12u5_all.deb
 7a904247cda4006e25a6a1bdcf10bc3f0fa10f5c7df69dd199c1e2fdf99327fa 63520 krb5-locales_1.20.1-2+deb12u5_all.deb
 c581dc18cdc9af30a3f7f58a36c49e07cc7bf82009bd649bb41c14f5f9f3dfad 12156 krb5_1.20.1-2+deb12u5_all-buildd.buildinfo
Files:
 b32fd2957dffde7d57ae3c2351bcdf57 2792436 doc optional krb5-doc_1.20.1-2+deb12u5_all.deb
 e690266fccc5d75bee13b7f8c34a0033 63520 localization optional krb5-locales_1.20.1-2+deb12u5_all.deb
 4978103d34a4a05c1d9fb696a74f3c8b 12156 net optional krb5_1.20.1-2+deb12u5_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=PPL3
-----END PGP SIGNATURE-----