Advisory ROSA-SA-2023-2295

software: tang 11
WASP: ROSA-CHROME

package_evr_string: tang-11-4.src.rpm

CVE-ID: CVE-2023-1672
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: There is a race condition in the Tang server functions for key generation and key rotation. This flaw results in a small time interval during which Tang private keys become readable by other processes on the same host.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update tang