Package: tang-common (11-2+deb12u1) network-based cryptographic binding server - common files Other Packages Related to tang-common: [libc6 ] (>= 2.34)
GNU C Library: Shared libraries
[libhttp-parser2.9 ] (>= 2.8.0)
parser for HTTP messages written in C
[libjansson4 ] (>= 2.14)
C library for encoding, decoding and manipulating JSON data
[libjose0 ] (>= 10)
Javascript Object Signing and Encryption (José) - library
[adduser ]
add and remove users and groups
[jose ]
C implementation of Javascript Object Signing and Encryption standards
Package file paths (9) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/tang-show-keys /usr/libexec/tangd /usr/libexec/tangd-keygen /usr/libexec/tangd-rotate-keys /usr/share/doc/tang-common/changelog.Debian.gz /usr/share/doc/tang-common/copyright /usr/share/man/man1/tangd-rotate-keys.1.gz /usr/share/man/man1/tang-show-keys.1.gz /usr/share/man/man8/tang.8.gz Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2023-1672 ] Published: Jun 7, 2023, 12:00:00 AM UTC
tang: CVE-2023-1672
Medium(5.3) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 28, 2026, 5:45:50 PM UTC
Details (2) 11-2+deb12u1 · amd64 · bookworm
Fixed · Fixed: 11-2+deb12u1
dsa · tang · debian · bookworm; dsa · tang · debian · 12
11-2+deb12u1 · arm64 · bookworm
Fixed · Fixed: 11-2+deb12u1
dsa · tang · debian · bookworm; dsa · tang · debian · 12
[CVE-2021-4076 ] Published: Dec 7, 2021, 12:00:00 AM UTC
tang: CVE-2021-4076
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:02:32 PM UTC
Details (2) 11-2+deb12u1 · amd64 · bookworm
Fixed · Fixed: 11-1
dsa · tang · debian · bookworm; dsa · tang · debian · 12
11-2+deb12u1 · arm64 · bookworm
Fixed · Fixed: 11-1
dsa · tang · debian · bookworm; dsa · tang · debian · 12
Last synced: Oct 29, 2026, 4:27:16 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
11-2+deb12u1 / amd64 Observed Sep 1, 2026 sha256 fd3a9fc7287c…c2a7f751Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): fd3a9fc7287c2f0ad47a1112f9cf08b09573a62ae480249497aa6780c2a7f751
Verify download
printf '%s %s\n' 'fd3a9fc7287c2f0ad47a1112f9cf08b09573a62ae480249497aa6780c2a7f751' 'tang-common_11-2+deb12u1_amd64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
11-2+deb12u1 / arm64 Observed Sep 1, 2026 sha256 e3a4b325b59d…cf172d24Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): e3a4b325b59dc08d687bc77d620456f267ec497d2ba844e24905ffddcf172d24
Verify download
printf '%s %s\n' 'e3a4b325b59dc08d687bc77d620456f267ec497d2ba844e24905ffddcf172d24' 'tang-common_11-2+deb12u1_arm64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
