-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 08 Jul 2023 12:41:29 +0200
Source: tang
Architecture: source
Version: 8-3+deb11u2
Distribution: bullseye
Urgency: high
Maintainer: Christoph Biedl <debian.a...@manchmal.in-ulm.de>
Changed-By: Christoph Biedl <debian.a...@manchmal.in-ulm.de>
Changes:
tang (8-3+deb11u2) bullseye; urgency=high
.
* Fix CVE-2023-1672:
- Cherry-pick "Fix race condition when creating/rotating keys"
- Assert restrictive permissions on tang's key directory
In existing multi-user bullseye installations, rotating the keys
is suggested.
* Make the tangd-rotate-keys program executable
Checksums-Sha1:
9c7089ae4ec6cc4ab7f6d768b8a700e5e49db80a 2091 tang_8-3+deb11u2.dsc
4986b05eb78b148993d4685ed751191861d3eed0 10760 tang_8-3+deb11u2.debian.tar.xz
8618f02dcb0d46aa7c6a78d75a12faf0996ec4f6 8565 tang_8-3+deb11u2_armel.buildinfo
Checksums-Sha256:
89425f6566a35a0b0b4385360cf094e920376ef45e5f01532de7e11b184b57ea 2091
tang_8-3+deb11u2.dsc
b414c481e5f2183aaa22204ceb09ac57b78b2d1964006869a6be036b387e60a1 10760
tang_8-3+deb11u2.debian.tar.xz
a18a83cff88034882b337b1c7a064578df3ebbc26300ef5245d8a997784a1009 8565
tang_8-3+deb11u2_armel.buildinfo
Files:
c117f1de4099f1afbd3f47ca541463c5 2091 net optional tang_8-3+deb11u2.dsc
7c546f638932a821891aeee149affc9a 10760 net optional
tang_8-3+deb11u2.debian.tar.xz
61dcc8dc3e0860e294ae4601fd8fe1bc 8565 net optional
tang_8-3+deb11u2_armel.buildinfo
-----BEGIN PGP SIGNATURE-----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=SuCt
-----END PGP SIGNATURE-----
