krb5 (1.22.1-2ubuntu4) resolute; urgency=medium

  The arcfour-hmac-md5 and des3-cbc-sha1 are weak, deprecated algorithms.
  However, krb5 still includes them in its default algorithm lists when users
  do not specify a list with algorithms to be used. This version drops these
  two deprecated algorithms from that default list. Note that we did not
  remove support for those algorithms at this moment. Instead we just dropped
  them from the default list that the client will try in case the user do not
  specify any algorithms in their configuration file, in the
  permitted_enctypes directive in the libdefaults section in /etc/krb5.conf

 -- Athos Ribeiro <athos@ubuntu.com>  Fri, 20 Mar 2026 14:00:11 -0300
