-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 22 May 2026 14:56:30 +0200
Source: haveged
Binary: haveged haveged-dbgsym haveged-udeb libhavege-dev libhavege2 libhavege2-dbgsym
Architecture: armhf
Version: 1.9.14-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 haveged    - Linux entropy source using the HAVEGE algorithm
 haveged-udeb - Linux entropy source using the HAVEGE algorithm -- udeb (udeb)
 libhavege-dev - entropy source using the HAVEGE algorithm - development files
 libhavege2 - entropy source using the HAVEGE algorithm - shared library
Closes: 1137096
Changes:
 haveged (1.9.14-1+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix privilege escalation via command socket (CVE-2026-41054)
     (Closes: #1137096)
   * Check peer credentials before reading command (CVE-2026-41054)
Checksums-Sha1:
 106620b1ee91100e46d8fa034ed49edb435eada8 27872 haveged-dbgsym_1.9.14-1+deb12u1_armhf.deb
 0f154d399c8eed8d426ecf733830de8f5c16019e 25420 haveged-udeb_1.9.14-1+deb12u1_armhf.udeb
 be862a89fb4bead68e391bd6cc511bc02919e17e 7328 haveged_1.9.14-1+deb12u1_armhf-buildd.buildinfo
 05d705511ae40534aeb81804ea68e2c556f9cd53 36788 haveged_1.9.14-1+deb12u1_armhf.deb
 9e548868c88beae0c1b00d517775536e0f6f0c3d 32936 libhavege-dev_1.9.14-1+deb12u1_armhf.deb
 e4b57c05e0033a74b28ae9e16edf959d04c28425 72124 libhavege2-dbgsym_1.9.14-1+deb12u1_armhf.deb
 e4233c2a5d561218b79434e0a485670e5c472f09 22932 libhavege2_1.9.14-1+deb12u1_armhf.deb
Checksums-Sha256:
 942730114c4e58fc9c031011ecbbcaad25ab3603c3ec7bec1a7212c9ce37e3b5 27872 haveged-dbgsym_1.9.14-1+deb12u1_armhf.deb
 2bade73db463ec831f4f2993c55ad2f5bed4fae0cd2c6772c37e73d014a61a35 25420 haveged-udeb_1.9.14-1+deb12u1_armhf.udeb
 07cb1cf37acd1b768dc0223f99d766f2bd5203363f07f39d7788dc343f52bfc8 7328 haveged_1.9.14-1+deb12u1_armhf-buildd.buildinfo
 a984cd0f8e180da257b16aa0cf5b1bd360935faca2ddcd418b27bbe9daa2b25c 36788 haveged_1.9.14-1+deb12u1_armhf.deb
 55dac2a587a36ed5fcbebad393c9b05915796ab526dcf45f02411d434b9a22f3 32936 libhavege-dev_1.9.14-1+deb12u1_armhf.deb
 1cd4c08b65b194a6135a7b2b1a8c6513e68da205caf949eef153e51180323e1c 72124 libhavege2-dbgsym_1.9.14-1+deb12u1_armhf.deb
 8374c69989d507a37ce017359571bc1be35573fe5be27cd0c63d9ab8834f08ad 22932 libhavege2_1.9.14-1+deb12u1_armhf.deb
Files:
 ba3f45f4a066b3a34da27939f9b0c881 27872 debug optional haveged-dbgsym_1.9.14-1+deb12u1_armhf.deb
 c5acbd8308f12996fb1ccdb681fe6b51 25420 debian-installer optional haveged-udeb_1.9.14-1+deb12u1_armhf.udeb
 1f06070c70cf4a7e8070a5e5d2c90267 7328 misc optional haveged_1.9.14-1+deb12u1_armhf-buildd.buildinfo
 2a156a0abbec6105e1c1bcaf46eaa238 36788 misc optional haveged_1.9.14-1+deb12u1_armhf.deb
 e2159c7185d702843b19179958a65b14 32936 libdevel optional libhavege-dev_1.9.14-1+deb12u1_armhf.deb
 562a68a895a44f8a20594224ec3854d3 72124 debug optional libhavege2-dbgsym_1.9.14-1+deb12u1_armhf.deb
 33303c8013efda696b30b357886156f3 22932 libs optional libhavege2_1.9.14-1+deb12u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=icuY
-----END PGP SIGNATURE-----