-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jul 2023 12:41:29 +0200 Source: tang Binary: tang tang-dbgsym Architecture: s390x Version: 8-3+deb11u2 Distribution: bullseye Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Christoph Biedl Description: tang - network-based cryptographic binding server Changes: tang (8-3+deb11u2) bullseye; urgency=high . * Fix CVE-2023-1672: - Cherry-pick "Fix race condition when creating/rotating keys" - Assert restrictive permissions on tang's key directory In existing multi-user bullseye installations, rotating the keys is suggested. * Make the tangd-rotate-keys program executable Checksums-Sha1: a580cb32a91c9bbad94df1d791697a980a4c47fc 27676 tang-dbgsym_8-3+deb11u2_s390x.deb 9a453417588df7d9946813726989887c5a4e758f 8281 tang_8-3+deb11u2_s390x-buildd.buildinfo 99b7177fd2b539066bce9b7470797ac84a485623 17784 tang_8-3+deb11u2_s390x.deb Checksums-Sha256: 65597bb6b45405e085176d6d5b1d9661c5f68e777faac1ad9fe8ba7168984d17 27676 tang-dbgsym_8-3+deb11u2_s390x.deb 172f29e5d38cb6696c2278f22611e5f28ec028e27972b7e40deee7d1a276ec08 8281 tang_8-3+deb11u2_s390x-buildd.buildinfo ef3926063b58da0eee7bb4cfb2bb94021a7f430846a6318d7eff5996ff6958ef 17784 tang_8-3+deb11u2_s390x.deb Files: 27e784e9177531b53fb8465062fdd3b9 27676 debug optional tang-dbgsym_8-3+deb11u2_s390x.deb 1e4bc25bd5e7adb3e16a58ef5b636c27 8281 net optional tang_8-3+deb11u2_s390x-buildd.buildinfo 1871ee07055eda4f153a3284dcba58a6 17784 net optional tang_8-3+deb11u2_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEhBjA3afmaHyzk51IFQ1EGN3xM6QFAmS9WfIACgkQFQ1EGN3x M6R3qA//QH/LXzO4oAI2vBO5Wu60tAeSoDbZ8Ipq/o0CjY31YWeQ0nYNU+JJY+Ib 6xSHCtvJ5gwxbYyLCjskcwTGW9ihi/MZgy6HVv8RJkrDFjui6yV4PF3uU7WRMzXV pibySkRGLfQW1+BVJrsGrFfTRYdb52TBRaU6TGdzFHEQVJfO6k/FsGlN7GWA+8O8 vQrguDP2Cv4HGrl/KjwC3VP7bDYFeR0vXhQ5Gu+LM4WjdYlKyJNajjC2DmoL8DZS esM2UTa44/K019mApTQnheG3mJhF4FK2mPix847iXPqN7eXK+3m8P7iWavttpsh3 xbrSWELh0KnzGzSeIydahUB81SI40rjT7FUOBdrDNqJmSQONv3w2u2Lb72Y7gY64 oXWfgvw2u6z94bwTkZfGR6y8DhJTTQZn6y9mNJSeTtKoCqiBVwVafpVXRWxXM+Pd oPaq4K7nKkfJBW9QQVZ0Pi1GaQZZ+IgDG8L1R7ash9eHpqcnat25et8ZYWAeYvA3 Z9wj2wPsUDY/QWhw97sdzBMr80moygj0ECsIc5Ios+9Ki0ix63eEqOSQiOCgBIf5 YhfznuHdu+RTy80fLR30+Cnomi8kIg34KQd5kjHjcF3SGZ7iiG03x8B9lYt3Uelc BwTk6Se9kpDPsziWSD/Dfl+qxPcrC+sI8TV+9ZjYgTsnnZxAi+Q= =A2FM -----END PGP SIGNATURE-----