-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jul 2023 12:41:29 +0200 Source: tang Architecture: source Version: 8-3+deb11u2 Distribution: bullseye Urgency: high Maintainer: Christoph Biedl Changed-By: Christoph Biedl Changes: tang (8-3+deb11u2) bullseye; urgency=high . * Fix CVE-2023-1672: - Cherry-pick "Fix race condition when creating/rotating keys" - Assert restrictive permissions on tang's key directory In existing multi-user bullseye installations, rotating the keys is suggested. * Make the tangd-rotate-keys program executable Checksums-Sha1: 9c7089ae4ec6cc4ab7f6d768b8a700e5e49db80a 2091 tang_8-3+deb11u2.dsc 4986b05eb78b148993d4685ed751191861d3eed0 10760 tang_8-3+deb11u2.debian.tar.xz 8618f02dcb0d46aa7c6a78d75a12faf0996ec4f6 8565 tang_8-3+deb11u2_armel.buildinfo Checksums-Sha256: 89425f6566a35a0b0b4385360cf094e920376ef45e5f01532de7e11b184b57ea 2091 tang_8-3+deb11u2.dsc b414c481e5f2183aaa22204ceb09ac57b78b2d1964006869a6be036b387e60a1 10760 tang_8-3+deb11u2.debian.tar.xz a18a83cff88034882b337b1c7a064578df3ebbc26300ef5245d8a997784a1009 8565 tang_8-3+deb11u2_armel.buildinfo Files: c117f1de4099f1afbd3f47ca541463c5 2091 net optional tang_8-3+deb11u2.dsc 7c546f638932a821891aeee149affc9a 10760 net optional tang_8-3+deb11u2.debian.tar.xz 61dcc8dc3e0860e294ae4601fd8fe1bc 8565 net optional tang_8-3+deb11u2_armel.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWXMI+726A12MfJXdxCxY61kUkv0FAmSp0a4ACgkQxCxY61kU kv3DDA/+NiRvqS/exi/yaiaU2EDXt2ZzD0+5UAj764r5NpgZwiWxxXY99C+PceAG DL/5kdKL6lb41KIXXrPHBbv9oRb183Hl3cl+ZcVVhGlVJIz8V13cDJ3WMRN1Hwqt 6QBpYtF9VTGVIbRvfD8Ds7WDjrp7qxhOWTE7CgS7ttEduK0180/c14VvR7Zm1zNK 4Z88yxfBaKDFJjULBsAxEMxqN1Zgs/YdibpiZ9mjWSSH47zF7SHCzf2Rr64PTB4C LBTtfk9CwZXuoXZLOoW0yfxx1+P57z3cYZ1HMO99xsMaSbwgnQteYk1+Ru6TG9HX jdkDfgl0jzKtVDmSed9Snf7sdi/lzUiLhi0sfkoMnaw6gRuBjHSa2yUqhkPD5s4f h6o7tUhfzDQJWC7OA/LWiWpOHbMsSbuVLywx+RvAZYXH9L4bi95E+r0qFbXnUGVV mub9V+wmRhn9PhkFyVwbXnDVzc8q0TiURThnjIVUJ8msbaPdo/7rqIzdt0bxgCy3 U4+7ECOJnB6fz86u+ThdSUB7++DulNpKCInwvXP5MRa1rpHV0yVdO3YctF7x01WR N8juNgkSPrnume2N6g2+GSrHmqxoaBfwyvUATu/mwAzVExB7XsOmQkp7R8LE5IJU W2VaO1fBjJUFIHb2GGJiCV0GqAP+hl/q3NIlKximr4T8uI0ezlk= =SuCt -----END PGP SIGNATURE-----