-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Jul 2023 12:41:29 +0200
Source: tang
Binary: tang tang-dbgsym
Architecture: amd64
Version: 8-3+deb11u2
Distribution: bullseye
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Christoph Biedl <debian.axhn@manchmal.in-ulm.de>
Description:
 tang       - network-based cryptographic binding server
Changes:
 tang (8-3+deb11u2) bullseye; urgency=high
 .
   * Fix CVE-2023-1672:
     - Cherry-pick "Fix race condition when creating/rotating keys"
     - Assert restrictive permissions on tang's key directory
     In existing multi-user bullseye installations, rotating the keys
     is suggested.
   * Make the tangd-rotate-keys program executable
Checksums-Sha1:
 bfd9bdd91e49cee0acefcb2b0d4c83aa679172ed 27012 tang-dbgsym_8-3+deb11u2_amd64.deb
 f9bdd2d19707adf94a0b825f4afaee27b00def68 8361 tang_8-3+deb11u2_amd64-buildd.buildinfo
 0fc653c8d5e168100adef7d3b7385a5feddc6394 18256 tang_8-3+deb11u2_amd64.deb
Checksums-Sha256:
 b405c953546ceec461b02613a6718da944ce8dd4842ccea652fbe4cdbf672535 27012 tang-dbgsym_8-3+deb11u2_amd64.deb
 876a929a21637b6c62857cea473bd82eb7ba6f34e76f02d7b817957cbbf92247 8361 tang_8-3+deb11u2_amd64-buildd.buildinfo
 488b189d05799d6424cb13abd2f8a196015897a2d5fa27476240025e1019cc62 18256 tang_8-3+deb11u2_amd64.deb
Files:
 17d5014bdc092a3dee3176b203036204 27012 debug optional tang-dbgsym_8-3+deb11u2_amd64.deb
 2ff15d2268420a55aa465653335f5955 8361 net optional tang_8-3+deb11u2_amd64-buildd.buildinfo
 f0a94147459e36804c9311d6ec002f0a 18256 net optional tang_8-3+deb11u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=4i/4
-----END PGP SIGNATURE-----