Summary
[7-8]
- Set correct user/group (tang/tang) in tangd-keygen
Resolves: rhbz#2188743
[7-7]
- Fix race condition when creating/rotating keys
Resolves: rhbz#2182410
Resolves: CVE-2023-1672
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | tang | 0:7-8.el8 |
Vulnerabilities 1
-
Medium 5.3
Race condition exists in the key generation and rotation functionality
A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.