Lucene search

K
redhatRedHatRHSA-2023:7022
HistoryNov 14, 2023 - 8:43 a.m.

(RHSA-2023:7022) Moderate: tang security and bug fix update

2023-11-1408:43:15
access.redhat.com
9
tang server
network bound disk encryption
security fix
rhsa-2023:7022
red hat enterprise linux 8.9 release notes

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The tang package provides the server side of the Network Bound Disk Encryption (NBDE) project.

Security Fix(es):

  • tang: Race condition exists in the key generation and rotation functionality (CVE-2023-1672)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section.