-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jul 2023 12:41:29 +0200 Source: tang Binary: tang tang-dbgsym Architecture: mips64el Version: 8-3+deb11u2 Distribution: bullseye Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Christoph Biedl Description: tang - network-based cryptographic binding server Changes: tang (8-3+deb11u2) bullseye; urgency=high . * Fix CVE-2023-1672: - Cherry-pick "Fix race condition when creating/rotating keys" - Assert restrictive permissions on tang's key directory In existing multi-user bullseye installations, rotating the keys is suggested. * Make the tangd-rotate-keys program executable Checksums-Sha1: c073d2b795e0f1c356943997642ff59feff95aee 28260 tang-dbgsym_8-3+deb11u2_mips64el.deb 0ca13013fbf6cc705dd7904f8049f094789a3cd0 8241 tang_8-3+deb11u2_mips64el-buildd.buildinfo 4e92c5c99bdaee10b6b1c2ff35e987172a74ac17 18288 tang_8-3+deb11u2_mips64el.deb Checksums-Sha256: e01d1163bca21fa100eb49b1db6dba3b2e4c2efc08bf72b22956c66b550f3c89 28260 tang-dbgsym_8-3+deb11u2_mips64el.deb 919cc527b49db7edfa5475e81617b99b472c0640c43fa4941a5aed2fa4138621 8241 tang_8-3+deb11u2_mips64el-buildd.buildinfo af4358b830e465a8352bbe25b774432043effa416858965c84737089aea126ba 18288 tang_8-3+deb11u2_mips64el.deb Files: 21d3c093dc473c4b3b5a88fafd88ccaf 28260 debug optional tang-dbgsym_8-3+deb11u2_mips64el.deb 2e1c461eb34e1d3eb33faf8719c04ab3 8241 net optional tang_8-3+deb11u2_mips64el-buildd.buildinfo 2cb7ba4065a036da3dd2f69832a032ea 18288 net optional tang_8-3+deb11u2_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbqxhtqqT8knLtgp0Ct/wWqReXfQFAmS9ZTYACgkQCt/wWqRe XfRtuw//a9gD8S0ZaYTL+maZpho8zvUPKMw1EMsssMVqH8TuoiM9OhVQBu4T4slD I/xnpWtZ9oqtsgDyv/eLe5F5SYwbGzbnQQhFq2G/65wR9JkheJJ6gLE8vXO+DORW 30ADsm7OixkllBYktjjWOHnEG3KTHlXXWgocyIWr9oradkAOCBbCY/tFH8hsRbqs Zm80R2v4Wa2sC+0KmXqz2UyM9Hws364QIMSGrxH/gm+DZm52HqQfOpmtMwpq6SRh GcCKxSWcrvUHzpr7RoFM78OHaBQp+zufEzT0fXQYX9Bxt1hJKg0qFoSIiG6exw2Z QF4wsX7y2qALjtaBGoyYGZTA0NhS5RdwKeJVMcogVpkYzIj+bYvq6ACrYKy3pteO ctoLBh2y79l5FWm4ymHpTR4GMQ0QIlDjCFVh3BirVt0V+RLTP3PbEVgWE0LoBujJ Rcz4sffjKGRI0gtdCxlJAl8rIqj49o4K4GaJbHykqyRxqU+Bfm8X2Gozv8OjwPGp QHRio4XjxYw2hr88yya0Z5Hl62hVxOxEu0xNg/V4fcsXpvZlRg4lwUhW4bsAyxd+ QJtEFd9RNbS66Ws9lSLQdz9Nparv3IhTUXORSOr641B6qI6yXMRzLZksdokYzPMk 0TUNRBrJCQIQmgGkKtmcDPzKkRlqtcykhzobAm9ttu2DrsEU3Ro= =xyfI -----END PGP SIGNATURE-----