Alpine/haveged: high 7.8
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`c
Action: Upgrade haveged to 1.9.21-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.21-r0 | - |
Fixed versions
| 1.9.21-r0 |
Sources
- osv: ALPINE-CVE-2026-41054#Alpine:v3.24/haveged
- https://security.alpinelinux.org/vuln/CVE-2026-41054
published · modified · JSON