-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jul 2023 12:41:29 +0200 Source: tang Binary: tang tang-dbgsym Architecture: ppc64el Version: 8-3+deb11u2 Distribution: bullseye Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Christoph Biedl Description: tang - network-based cryptographic binding server Changes: tang (8-3+deb11u2) bullseye; urgency=high . * Fix CVE-2023-1672: - Cherry-pick "Fix race condition when creating/rotating keys" - Assert restrictive permissions on tang's key directory In existing multi-user bullseye installations, rotating the keys is suggested. * Make the tangd-rotate-keys program executable Checksums-Sha1: 6cb277d9d96b3e231afee8845ca64d4c56ffb055 28228 tang-dbgsym_8-3+deb11u2_ppc64el.deb b6aafcb8f3a41496a2c622c38affbf280a820f67 8379 tang_8-3+deb11u2_ppc64el-buildd.buildinfo fc4d158bf2dab8598082d9a309108cfd0d51307b 19732 tang_8-3+deb11u2_ppc64el.deb Checksums-Sha256: 089c5f4212b8cad73781953f60492e5653cf614486e80f27e2063b9783df6930 28228 tang-dbgsym_8-3+deb11u2_ppc64el.deb 47715698a22916055e781008a2418be04249fe9f1915700ff330dd0f06dc6c19 8379 tang_8-3+deb11u2_ppc64el-buildd.buildinfo 4ec7497d05a3c331e8b7aedd5447fd7d400064b6101c5196844737c3a19d13d6 19732 tang_8-3+deb11u2_ppc64el.deb Files: 93fc4ea756cdca1912b60616083462c1 28228 debug optional tang-dbgsym_8-3+deb11u2_ppc64el.deb c7061638dc63214b399407b958611fbd 8379 net optional tang_8-3+deb11u2_ppc64el-buildd.buildinfo 147f5bfd34583e65cbff2107764636c5 19732 net optional tang_8-3+deb11u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHDNCkvGgp2XShfnByW8ECaj2byoFAmS9Q4kACgkQyW8ECaj2 bypVcg//U+FvuCVjBp0oKsFgi+kBaliqPm16ksy/Xmn5A6Se1CScidxkLz1M0T7c FEL20eDxhMvMqWwKs063MRQ/W8nD98F3WXvhw0ruevTwvJ1+GxFy3qx6zEAOlnKB fJF7wlOcl0Sp/jiSpZRwknyCeGl09K68iW1ufIEK+vNSlmLiv+RCYNfEqdqx08bS LJxrV0V5Lq4hSkA1iKvVP0JSxKvpPL05bYcpB+FlxOLRyQ1PRvIwjF0s45jfEDL0 AHSMiXqK4Q4t6+EzVzw2TWZMqUu13D8c8YaL+l60BknrXFxG6PV2dqQUCeeN+/IN fxu6JMB+SLFrZAJXMFYIVERwVeVqk2hPhtQ3q3ZRR+owvsoWjmDKDy2P5phJD5fR yPmJCSmUWyBDrEnW4Ek+aMyVhlRZ/xbzsKtMeoAeWlBn52hLIfQhrikf4DFV8LEY Xe/nj2Tl2kQYu3vzadFU18M2Bu57QiIbN+7WD2JD8teqHJmeP3R5EnWcwtRjOS9w bZk/uf7FgwFmxCwagb8HA3JJ4uteizaiyKuR3DIZZHVRphmIvTtV7g5Idj1GOHLR Ebc0u/cwgq6t0/Uvwyh85IlHgC8zg0j0yZZa2gXfJAVQu+2FfusgXs6dK1PIVSfe hXPN1hJLNgCktHKGYIw6Xg6BOWy7e57y80g9AeQpZpRKpfd6fSI= =Lznp -----END PGP SIGNATURE-----