-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Jul 2023 12:41:29 +0200
Source: tang
Binary: tang tang-dbgsym
Architecture: i386
Version: 8-3+deb11u2
Distribution: bullseye
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Christoph Biedl <debian.axhn@manchmal.in-ulm.de>
Description:
 tang       - network-based cryptographic binding server
Changes:
 tang (8-3+deb11u2) bullseye; urgency=high
 .
   * Fix CVE-2023-1672:
     - Cherry-pick "Fix race condition when creating/rotating keys"
     - Assert restrictive permissions on tang's key directory
     In existing multi-user bullseye installations, rotating the keys
     is suggested.
   * Make the tangd-rotate-keys program executable
Checksums-Sha1:
 93c43f2ff05609cbdda6bca7b154f03d28f1eb5b 24648 tang-dbgsym_8-3+deb11u2_i386.deb
 ed00b4ffbc880870f88d20cd5cb5799f39d64c0a 8300 tang_8-3+deb11u2_i386-buildd.buildinfo
 e95951092ec41607dfb5b4b06a353c7d213edab2 18776 tang_8-3+deb11u2_i386.deb
Checksums-Sha256:
 eedee938d9eba74cdca823af0d2c1c15faaf4fb0e82dbbab37c6669605612b35 24648 tang-dbgsym_8-3+deb11u2_i386.deb
 c6ff9dc638d4e541470a97f62c1624ad4a373f8fae642f3d82af3c2a67bca518 8300 tang_8-3+deb11u2_i386-buildd.buildinfo
 63e3f9bf66686ac3052f90559b2be20a16c1f5f994e50729f5abc999dca0878f 18776 tang_8-3+deb11u2_i386.deb
Files:
 168c0b59f86f9581df7b8e456ebf6164 24648 debug optional tang-dbgsym_8-3+deb11u2_i386.deb
 a1f3735a10a1705ea28a855e3bafb86a 8300 net optional tang_8-3+deb11u2_i386-buildd.buildinfo
 47116586c84b5f8a18a3a3ebecad9100 18776 net optional tang_8-3+deb11u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=bxHL
-----END PGP SIGNATURE-----