-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jul 2023 12:41:29 +0200 Source: tang Binary: tang tang-dbgsym Architecture: mipsel Version: 8-3+deb11u2 Distribution: bullseye Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Christoph Biedl Description: tang - network-based cryptographic binding server Changes: tang (8-3+deb11u2) bullseye; urgency=high . * Fix CVE-2023-1672: - Cherry-pick "Fix race condition when creating/rotating keys" - Assert restrictive permissions on tang's key directory In existing multi-user bullseye installations, rotating the keys is suggested. * Make the tangd-rotate-keys program executable Checksums-Sha1: a0677a801220cfeed91872dcc5237a436a94c9d6 26712 tang-dbgsym_8-3+deb11u2_mipsel.deb e9a488fcd0a4d2accbbcb65fb7ed3e37e33cb58e 8218 tang_8-3+deb11u2_mipsel-buildd.buildinfo 05536d8c451552b347932125557a3e8425e4e7ae 18248 tang_8-3+deb11u2_mipsel.deb Checksums-Sha256: 06c706e05a3ea66b45ec3f22b378da97b51869ec5468f9ef38ed5e3796d63d4a 26712 tang-dbgsym_8-3+deb11u2_mipsel.deb 002f87af6d73b1530c5c09ad0d96323f9256248d971d23071aa0d39b4e12657a 8218 tang_8-3+deb11u2_mipsel-buildd.buildinfo dca93e36207c0120f6fd5f6e9c14e9b31fcce7070e4a64710e677e2d0229db44 18248 tang_8-3+deb11u2_mipsel.deb Files: 02a730a58288ef29784c1874ea938998 26712 debug optional tang-dbgsym_8-3+deb11u2_mipsel.deb cfa7fb442a8a9fbca5f5ae30133020af 8218 net optional tang_8-3+deb11u2_mipsel-buildd.buildinfo d0622e86927b644e17e082c93db54e7c 18248 net optional tang_8-3+deb11u2_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbqxhtqqT8knLtgp0Ct/wWqReXfQFAmS9ZlYACgkQCt/wWqRe XfSkiw/+P9lMXyPSv5Qyt6/QdtFcKX8VmxPz2+DjP/peDcujPqks02W1zHeh2VhY z/r70naMg6Lb256ToNWjT+vw1o5Vny1EbjKU33sNhLhej/mubb+4WETZvfrJ7qUO /6fFWXftN3DP9aPnRB169MDPBt7jrI81dN8bznjUlX9HU8q4igrV1PKk5+SjEhSj W2GQHbKO57pg6dB7Bzif8el894WW0MW3Ku1t82FHiJw+uWJwoPu9nNUhZKoaiZ+v 4bkCKcvo258jYXtM25td5/wxHA2mJ/zwOD+RWYmA1flGzQ5BosIxq26j39dpNT+M 1zj+FLbKEkK8qpHLHTH8LAG1SBGH47+r+3KRV6wwSxKfOVOcgh2d/zZ/WjN9B/RP lrwcao7/v6zj3zjxl7vtQ+t5QxtxHIBh/x/JCWMouG4IEO3m3BxYfNsL1goX5NbY cV5z5p4Eqpy0BPmsSz+Rt++SpE5TSA/K39O8tTOKCYVMfkSV623L8T/b+ZtK/KuX MF2M4Ky4/ve6+sc0N55juU406zOGrd725aETnOu08/ntuhFlqfjqNHfN9nQl5klv 6QCAwGMOxhiBTf9L0aKpsmbOndJqNM3esjm7ly1DYKH7gIVSyHqi7XiC1cIbboLX aKBHqzLfpm1/7yjaRBh27RMu9xJmeu4RPTX03+eJOcMCzCrhnK8= =SC5Q -----END PGP SIGNATURE-----