public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Jirka Hladky <jhladky@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/haveged] epel10.2: Merge rawhide — update to 1.9.23
Date: Thu, 18 Jun 2026 01:31:14 GMT [thread overview]
Message-ID: <178174627489.1.6283886358943425706.rpms-haveged-dba7d4ef5ea5@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/haveged
Branch : epel10.2
Commit : dba7d4ef5ea511a0069c021feaf61cba65ec83c3
Author : Jirka Hladky <jhladky@redhat.com>
Date : 2026-06-18T03:30:59+02:00
Stats : +20/-31 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/haveged/c/dba7d4ef5ea511a0069c021feaf61cba65ec83c3?branch=epel10.2
Log:
Merge rawhide — update to 1.9.23
---
diff --git a/.gitignore b/.gitignore
index 5d515b5..b8e23e8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,3 +26,5 @@
/haveged-1.9.17.tar.gz
/haveged-1.9.18.tar.gz
/haveged-1.9.21.tar.gz
+/haveged-1.9.22.tar.gz
+/haveged-1.9.23.tar.gz
diff --git a/haveged.spec b/haveged.spec
index 291b897..2054789 100644
--- a/haveged.spec
+++ b/haveged.spec
@@ -1,7 +1,7 @@
%define dracutlibdir lib/dracut
Summary: A Linux entropy source using the HAVEGE algorithm
Name: haveged
-Version: 1.9.21
+Version: 1.9.23
Release: 1%{?dist}
# Automatically converted from old format: GPLv3+ - review is highly recommended.
License: GPL-3.0-or-later
@@ -105,6 +105,20 @@ cp -p COPYING README ChangeLog AUTHORS contrib/build/havege_sample.c %{buildroot
%changelog
+* Thu Jun 18 2026 Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
+- Update to 1.9.23
+- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
+- Security: fix OOB memory access in safein()/safeout() on socket errors
+- Security: reject command socket connections from different user namespaces
+- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
+- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
+- Fix stale semaphore recovery after SIGKILL
+- Fix compilation when NO_COMMAND_MODE is defined
+
+* Thu May 21 2026 Jirka Hladky <hladky.jiri@gmail.com> - 1.9.22-1
+- Update to 1.9.22
+- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation
+
* Wed May 20 2026 Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
diff --git a/sources b/sources
index f129300..8d59ebd 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (haveged-1.9.21.tar.gz) = 6c8f746fa71a0eefcf8e14711cb038891041fb3e313e9d8e51184f18c731fef0f126696dc981212e0cadecb89f026c121b4d8feb188870a336404362adf2b726
+SHA512 (haveged-1.9.23.tar.gz) = 69fe3e024ac213d2cbbbc36e716cc0822929e0a18aabb0802e2cc9818381073fef034b247c3e2b458b6ca3d9bc4c01b86b1954dff2767752ea2b0551958efb61
diff --git a/haveged.spec b/haveged.spec
index 14e4296..2054789 100644
--- a/haveged.spec
+++ b/haveged.spec
@@ -125,35 +125,8 @@ cp -p COPYING README ChangeLog AUTHORS contrib/build/havege_sample.c %{buildroot
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)
-* Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-11
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
-
-* Thu Jul 24 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-10
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
-
-* Fri Jan 17 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-9
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
-
-* Thu Jul 25 2024 Miroslav Suchý <msuchy@redhat.com> - 1.9.18-8
-- convert license to SPDX
-
-* Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-7
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
-
-* Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-6
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Sat Jan 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-5
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
-
-* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
-
-* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.18-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
+* Mon Jun 16 2025 Jirka Hladky <hladky.jiri@gmail.com> - 1.9.18-1
+- Initial build for EPEL 10
* Sat Apr 09 2022 Jirka Hladky <hladky.jiri@gmail.com> - 1.9.18-1
- Update to 1.9.18
reply other threads:[~2026-06-18 1:31 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178174627489.1.6283886358943425706.rpms-haveged-dba7d4ef5ea5@fedoraproject.org \
--to=jhladky@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox