-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jul 2023 12:41:29 +0200 Source: tang Binary: tang tang-dbgsym Architecture: armel Version: 8-3+deb11u2 Distribution: bullseye Urgency: high Maintainer: arm Build Daemon (arm-arm-01) Changed-By: Christoph Biedl Description: tang - network-based cryptographic binding server Changes: tang (8-3+deb11u2) bullseye; urgency=high . * Fix CVE-2023-1672: - Cherry-pick "Fix race condition when creating/rotating keys" - Assert restrictive permissions on tang's key directory In existing multi-user bullseye installations, rotating the keys is suggested. * Make the tangd-rotate-keys program executable Checksums-Sha1: 1d6d6ae3e4887bb2f70a0d661cb86d32bde7d5cb 27844 tang-dbgsym_8-3+deb11u2_armel.deb 69bac6636008d0111884bc20fd04acf3d0386d38 8260 tang_8-3+deb11u2_armel-buildd.buildinfo 44cb237438f69678d18f3b9d2007601a2da8f221 18096 tang_8-3+deb11u2_armel.deb Checksums-Sha256: 57644a283d907a438730d9d137a46968b449d0d1fe080fbde57a7396ce487540 27844 tang-dbgsym_8-3+deb11u2_armel.deb 45047d1daabf542b1de46b981446470c30f930831f061c8eff5eb6e5cba2cb00 8260 tang_8-3+deb11u2_armel-buildd.buildinfo 7d774627a45051a6b36afc99727d06c7a152eaca6f5325dbb46293dac7e885a7 18096 tang_8-3+deb11u2_armel.deb Files: e4bd5a03d6675db1569d9a2e6af6a166 27844 debug optional tang-dbgsym_8-3+deb11u2_armel.deb 165ad9986b5f4c6f57a8abc21ca049be 8260 net optional tang_8-3+deb11u2_armel-buildd.buildinfo 99b168d300e1354245ef94db0b4102fa 18096 net optional tang_8-3+deb11u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Prg5L5o4koxD5sKbi61NfD5HDwFAmS9QS8ACgkQbi61NfD5 HDzP5RAAgaSr/Hg5jzTVYlCWlQQyj7YQmA92KEVXauiGA0m8nFu2qSlom24WhUM4 PpFcFKS3Rm4T7VeGYlI80/+nHxWitRGDNV6XI1JZDSvK+L6N5cXa6A8fLrEFDeWg J9iPq+YxnribJVEEx1CWd09IiXbPdTERjlEAc0v6VoXlzlvf8Dt0vV72i/42arc+ 3x0rytD634K2Wfz82MjHXs/tCJzaIB0Tzg9AFXxB2YFlFGAwBtngL2S2uBcFnb4M UwoSB6O0V2Coje6YPPUADSCYJtWOPnNI/w7BloEP8OsY8OTvPFV19p/EXSlZnf33 lYAu1+ZJgvOjEfC6TnYP+UiA8vWhdXcaG6pWEcKJlsAzezKJB+YJZWOm11/7AFFO Eo6W1rfXCm078f6ae/jBMrrVHZtgLbSRa2w+041jcfWHh13MYFl7jHfRjtxN1FEZ sh33JZGtz25m8AObMjIYXSh7hjJ8p+A83CquJe1tMOFRIunn2ouq1cQYupCCiufP EGYc13+MPluwtEHGHKsNLO8mmRT93FZ95q/fjpNNt8icDe6TadQSz4HmevRuKRo8 w9oOItBdfss6aq/VOEkqx+m3pf8/CqSt3jK2190SLQ4zlFZDWm0gQil9vUGIadYT TjZ5qDKJeEEa/da6f061/QNkUjoNNqp1Nmto5Epz/AZCkNssE8E= =CVZT -----END PGP SIGNATURE-----