Debian/haveged: high 7.8
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`c
Action: Upgrade haveged to 1.9.21-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.21-1 | - |
Fixed versions
| 1.9.21-1 |
Sources
- osv: DEBIAN-CVE-2026-41054#Debian:14/haveged
- https://security-tracker.debian.org/tracker/CVE-2026-41054
published · modified · JSON