-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 10 May 2026 09:16:51 +0200
Source: krb5
Architecture: source
Version: 1.21.3-5+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Sam Hartman <hartmans@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1135317
Changes:
 krb5 (1.21.3-5+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix two NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
     (Closes: #1135317)
Checksums-Sha1:
 4b809a2645d73d6af8b6e7d8997fec286665916f 4189 krb5_1.21.3-5+deb13u1.dsc
 3e383bbe88cbed56bdad4ba655c40abf0e961cf7 9136145 krb5_1.21.3.orig.tar.gz
 bba46878ffc67fcd96821cd7b8f451b5b1b2f475 833 krb5_1.21.3.orig.tar.gz.asc
 da5ad2ca88f2b585813f8f4bc1fa3fe8163aa1c3 105252 krb5_1.21.3-5+deb13u1.debian.tar.xz
 75e840fd7b1ec4245fb1afc6680ee91f168ee7da 6239 krb5_1.21.3-5+deb13u1_source.buildinfo
Checksums-Sha256:
 d17d2840bc97fea2c2375245569ca67838a2b557ee083c6cbe42b129a317212c 4189 krb5_1.21.3-5+deb13u1.dsc
 b7a4cd5ead67fb08b980b21abd150ff7217e85ea320c9ed0c6dadd304840ad35 9136145 krb5_1.21.3.orig.tar.gz
 85047c935fe949ef2e275885451b168557b923dd13a5aab0ef8fe6acd27b94d7 833 krb5_1.21.3.orig.tar.gz.asc
 02b873b239fbe7ddf016dfe44deba4130673f4606c18c93da0622e2bc8500fb4 105252 krb5_1.21.3-5+deb13u1.debian.tar.xz
 d87aa31971d1b2e2ff86bcb0ab6293637cb324261ce32ee984bd3497421e5325 6239 krb5_1.21.3-5+deb13u1_source.buildinfo
Files:
 e10499904baa7bc8d4945d9e9ece447c 4189 net optional krb5_1.21.3-5+deb13u1.dsc
 beb34d1dfc72ba0571ce72bed03e06eb 9136145 net optional krb5_1.21.3.orig.tar.gz
 cc604e5e51a7c3c314751c68c0cd5a09 833 net optional krb5_1.21.3.orig.tar.gz.asc
 5946cd017e80e40a2584fcc9cba7cd64 105252 net optional krb5_1.21.3-5+deb13u1.debian.tar.xz
 30c210ddc2a753a5e08e8a0f513592ef 6239 net optional krb5_1.21.3-5+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=qihM
-----END PGP SIGNATURE-----