Packages / Alpine Linux 3.23 / Source / haveged

Source Package: haveged (1.9.21-r0)

Entropy harvesting daemon using CPU timings

The following binary packages are built from this source package:

  • haveged

    Entropy harvesting daemon using CPU timings

  • haveged-dev

    Entropy harvesting daemon using CPU timings (development files)

  • haveged-doc

    Entropy harvesting daemon using CPU timings (documentation)

  • haveged-openrc

    Entropy harvesting daemon using CPU timings (OpenRC init scripts)

Vulnerabilidades conocidas

CVEGravedadImpacto por versión
[CVE-2026-41054]

Published:

In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`c

High(7.8)Desconocido
Detalles (8)
  • 1.9.21-r0 · aarch64 · v3.23

    Desconocido · Corregida: 1.9.21-r0

    Version impact unknown

    pypi · haveged · alpine · 3.20; pypi · haveged · alpine · 3.21; pypi · haveged · alpine · 3.22; pypi · haveged · alpine · 3.23; pypi · haveged · alpine · 3.24

  • 1.9.21-r0 · x86_64 · v3.23

    Desconocido · Corregida: 1.9.21-r0

    Version impact unknown

    pypi · haveged · alpine · 3.20; pypi · haveged · alpine · 3.21; pypi · haveged · alpine · 3.22; pypi · haveged · alpine · 3.23; pypi · haveged · alpine · 3.24

  • 1.9.21-r0 · aarch64 · v3.23

    Desconocido · Corregida: 1.9.21-r0

    Version impact unknown

    pypi · haveged · alpine · 3.20; pypi · haveged · alpine · 3.21; pypi · haveged · alpine · 3.22; pypi · haveged · alpine · 3.23; pypi · haveged · alpine · 3.24

  • 1.9.21-r0 · x86_64 · v3.23

    Desconocido · Corregida: 1.9.21-r0

    Version impact unknown

    pypi · haveged · alpine · 3.20; pypi · haveged · alpine · 3.21; pypi · haveged · alpine · 3.22; pypi · haveged · alpine · 3.23; pypi · haveged · alpine · 3.24

  • 1.9.21-r0 · aarch64 · v3.23

    Desconocido · Corregida: 1.9.21-r0

    Version impact unknown

    pypi · haveged · alpine · 3.20; pypi · haveged · alpine · 3.21; pypi · haveged · alpine · 3.22; pypi · haveged · alpine · 3.23; pypi · haveged · alpine · 3.24

  • 1.9.21-r0 · x86_64 · v3.23

    Desconocido · Corregida: 1.9.21-r0

    Version impact unknown

    pypi · haveged · alpine · 3.20; pypi · haveged · alpine · 3.21; pypi · haveged · alpine · 3.22; pypi · haveged · alpine · 3.23; pypi · haveged · alpine · 3.24

  • 1.9.21-r0 · aarch64 · v3.23

    Desconocido · Corregida: 1.9.21-r0

    Version impact unknown

    pypi · haveged · alpine · 3.20; pypi · haveged · alpine · 3.21; pypi · haveged · alpine · 3.22; pypi · haveged · alpine · 3.23; pypi · haveged · alpine · 3.24

  • 1.9.21-r0 · x86_64 · v3.23

    Desconocido · Corregida: 1.9.21-r0

    Version impact unknown

    pypi · haveged · alpine · 3.20; pypi · haveged · alpine · 3.21; pypi · haveged · alpine · 3.22; pypi · haveged · alpine · 3.23; pypi · haveged · alpine · 3.24

Última sincronización:

[Catálogo de CVE]

Fuentes

  • Authoritative source; repository metadata signature verified

    Prueba de firma

    v3-23-main-aarch64:3c193cdb4a3ae8c5a08d7ef5282971be76249c13d1db367323e06212ec30d230

    Repository-signature verification record
    Signed-object SHA-256
    f399e7803b7b52f81a6307739a8951c6edcdbf54e825d0d34c309a2cd305569d
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Authoritative source; repository metadata signature verified

    Prueba de firma

    v3-23-main-x86-64:aecb4d45d58b2e08e09c841a9132ab6f77239d8117232bea8385b33090e25fbb

    Repository-signature verification record
    Signed-object SHA-256
    eae8fa0146127c33cd9a723915001f535277687349397f0d34f313638e33fc18
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026