-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jul 2023 12:41:29 +0200 Source: tang Binary: tang tang-dbgsym Architecture: armhf Version: 8-3+deb11u2 Distribution: bullseye Urgency: high Maintainer: arm Build Daemon (arm-arm-01) Changed-By: Christoph Biedl Description: tang - network-based cryptographic binding server Changes: tang (8-3+deb11u2) bullseye; urgency=high . * Fix CVE-2023-1672: - Cherry-pick "Fix race condition when creating/rotating keys" - Assert restrictive permissions on tang's key directory In existing multi-user bullseye installations, rotating the keys is suggested. * Make the tangd-rotate-keys program executable Checksums-Sha1: 19a133e6ee17d3cc374095e3bf3fed98459a168f 27480 tang-dbgsym_8-3+deb11u2_armhf.deb 89b3ecb53c2b6b295d6e81fea63c77be5d232807 8262 tang_8-3+deb11u2_armhf-buildd.buildinfo 98ee65c9c9d0354588d4eb0c52a0206c44177692 17272 tang_8-3+deb11u2_armhf.deb Checksums-Sha256: e14ab2435ecb44658184233141e1eec576c31da1e3ce494e2ef78e80448d3d14 27480 tang-dbgsym_8-3+deb11u2_armhf.deb 6472cadc0f47bc4b3621b16c101ecd79dc21d8bd37b3d70ca6b1c37b2f1697f2 8262 tang_8-3+deb11u2_armhf-buildd.buildinfo c2715fe93afdc57b4a9fe29b1cf66bbcb047d812b79e828ca83da9e5b21f293c 17272 tang_8-3+deb11u2_armhf.deb Files: c9a89c7403c7a669f4d2635c380c1e22 27480 debug optional tang-dbgsym_8-3+deb11u2_armhf.deb e9e651c57b3cd86b811e34ccef09ebc4 8262 net optional tang_8-3+deb11u2_armhf-buildd.buildinfo 2c90409a106322a721debcb5526cf0bb 17272 net optional tang_8-3+deb11u2_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Prg5L5o4koxD5sKbi61NfD5HDwFAmS9QIMACgkQbi61NfD5 HDx4ag/+O+lwv9a7dFYxor7Z3dieLEiLFvdVjhzUkPMHXSSc19VF3Dvhg2ywXIz0 KLViih9VzYs9lPiHC1LLqwRMOIQZzvy9LTRA1tQTXSmNQGusZjvH4kprZSc30o4W P5KTUqyZKrpM6WEST9jyPw+onG7wpU+1qGStoTst8s3639+S3ZvnI/Pkg4I8EnW5 69G6NWyS3Pzep7GY5esHE3TDlckpQL5M/Hzeh9G3rEQ0BMe2hTHavdml03x2RMYS NCx+PzN9zmuqiRH+lEu9rWGb47cFcbq88mJU9UYxwZLjnmfE5H/fNIg9aEWC5dbO 8OgIe+uO1Afw2Ad3UfWu6ofkxg1qitk3vmRU7hoUvP2QbG9PDqTkUPmCV+hnJ0GD qcYyrKiniksKaFylI4omfQS0wSo0kPVQTQIvbktOND5WhHIPjp7TUn+6JfUFpJKV ivwKntv3flpt/GRR5SFnF5w2NhnjotHqzPMwUH8HDS7VP7b8aJhznojv2q6VaJA2 KVPmyM4jw55pOTsD0O4/WkvOA4zMdlGOeUWj9ew2yS/u99E5Y1DoORTaokszodj/ GemzkYDaUpTp8/Qv4ADEioGfGL2W5aWq5W/XfMN4yx0cpU9Es00Xb6wweNd6oNfH 5gns7h6mkYFyvVEjaxCCeINEwxsH1lC3Mvo336YKTzzhePeb9Vo= =YL+N -----END PGP SIGNATURE-----