SUSE-SU-2026:2008-1

Source
https://www.suse.com/support/update/announcement/2026/suse-su-20262008-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2008-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:2008-1
Upstream
  • CVE-2026-41054
Related
  • CVE-2026-41054
Published
2026-05-19T11:55:01Z
Modified
2026-05-20T08:00:14Z
Summary
Security update for haveged
Details

This update for haveged fixes the following issue

  • CVE-2026-41054: missing exit out of permission check could lead to root exploit (bsc#1264086).

Changes for haveged:

  • Improvements on the linux kernel random subsystem have made move forward to socket communication within private network
  • Fix 'stop' of service, the daemon in foreground actually see daemon(7) for the rationale. Only 'simple' (default) and the help of udev, as starting services while starved of entropy
  • Add ppc64le support
  • update to 1.8
  • Correct additional run-time test aligment problems on mips.
  • haveged 1.7a
  • Correct VPATH issues and modify check target to support parallel builds and changes in automake 1.13 test harness.
  • Remove all sysvinit compatibility.
  • fix powerpc detection
  • Current version does support ARM, remove the ExcludeArch need network and can use PrivateNetwork=yes
  • Add online tests based on AIS-31
  • Fix install target, move to bin and eliminate script if not daemon, now use sysv and systemd templates
  • use -F with no arguments in haveged.service
  • build with -fpie
  • Use Service type 'simple' in systemd unit
  • fix build on ia64, s390, s390x
  • fix ppc64 build present in old versions have been fixed in different ways.
  • run spec cleaner
  • Link with full RELRO (-Wl,-z,relro,-z,now)
  • add systemd support
  • Drop as much capabilitites as possible using libcap-ng
  • I meant Enhances not Supplements
  • Implement hack to start by default only in VMs
  • use O_CLOEXEC on fds
  • add proper Requires(pre)
  • add a SUSE standard init script
References

Affected packages