-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jul 2023 12:41:29 +0200 Source: tang Binary: tang tang-dbgsym Architecture: arm64 Version: 8-3+deb11u2 Distribution: bullseye Urgency: high Maintainer: arm Build Daemon (arm-arm-01) Changed-By: Christoph Biedl Description: tang - network-based cryptographic binding server Changes: tang (8-3+deb11u2) bullseye; urgency=high . * Fix CVE-2023-1672: - Cherry-pick "Fix race condition when creating/rotating keys" - Assert restrictive permissions on tang's key directory In existing multi-user bullseye installations, rotating the keys is suggested. * Make the tangd-rotate-keys program executable Checksums-Sha1: db875a9d1cce0a451d3ad0cd484a229e9781bd03 27820 tang-dbgsym_8-3+deb11u2_arm64.deb af7046fcb30315d648db0060301faa875fe1608d 8331 tang_8-3+deb11u2_arm64-buildd.buildinfo 5a16b180eba08f226a79b3b48afb5d4ab49f83dc 18468 tang_8-3+deb11u2_arm64.deb Checksums-Sha256: df76c79a6211fc966cb169e077900a602b3b78b55b3fcb1fdb6e567e239cf5b0 27820 tang-dbgsym_8-3+deb11u2_arm64.deb fb7289791eab012956cbd16e4e9a8b7eaf60a1d3f08c7b896699208428a76051 8331 tang_8-3+deb11u2_arm64-buildd.buildinfo 5beb983ec2fad52b3e43e328b2c5dd414d60c2f44182cec180f078b96637bf81 18468 tang_8-3+deb11u2_arm64.deb Files: 2f895eb25c02c26d7dfcff18be1262a3 27820 debug optional tang-dbgsym_8-3+deb11u2_arm64.deb e1e87cc6331a6113802214ed3b758e8a 8331 net optional tang_8-3+deb11u2_arm64-buildd.buildinfo 2c6fc05de0423ce7313286166571fefd 18468 net optional tang_8-3+deb11u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEE4Prg5L5o4koxD5sKbi61NfD5HDwFAmS9Qc0ACgkQbi61NfD5 HDyy8g/4mS+zh3rHxhH509n4+vxOzTkmuDy6JB6O4w/XjiXTn6i5t5qyTCdXPjeY w2XKoQy/doUSRuxw88BGS/0u1ojjErdZRJDrwhGHqxPW2x/0otaH8KCc5VvNT+Yc C2XQvxmQzxND/kW9cSJIDojZWZuHYPfC/iup3pJSgl1uSyDMpPcwHqDdt5GE1VeY Fjww5O9TcbdFy6vUf4qfMnQ0QXJcbA0vo81eIdM+9y9fy3U5tVttADhrghk4boiR ciklzfaUhiDiNUVSw+4Oxibb2qKxBoL9P2xj25/Q92OS7+T8SgGw8uKDIFkaChmr pQ0GCTkhgK9BXPmpfIQQ4gIIKDEpetNT6Ea3+EFIhwTCei39uKcuquw+8gF1oeUB dzW63XFZT/AxiukH+xPNaFuEo5aNNq42WT4RHCREAv4FE5vm4BbXOGJAVBzdhcH2 M0yX/s7XUMMdBj1KzXaIobixlM8SWceFpPSWH2LhOna/Fmhw6LRysOwJuf07lDdJ rGU4Vbd8mqtE0fViZPUNF3nBDGyARY1kF1/fA1T5K6BVKtMIRiZzjSxh0pM6kgnU zOOljyhzgNo1WXPPYhU7OjCJAShawMwwe2+jVVTYvU6vzgJvCt0NifxBpfSlfA1u RwI7QZjQgxEnwHzTFkgM7tsyuiSWGWQTsW+m/6s+Pp+XbWUMJQ== =S0KP -----END PGP SIGNATURE-----