Merge PR "[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade haveged to 1.9.22 for CVE-2026-41054 - branch 3.0-dev" microsoft#17415

Author: CBL-Mariner-Bot

SPECS/haveged/haveged.signatures.json

@@ -1,6 +1,6 @@
 {
- "Signatures": {
-  "haveged-1.9.17.tar.gz": "02d9b7c801fbcf16bed43c27bf6ece570b79f4d94561f3eb30883fb5f89c526d",
-  "haveged.service": "bdc275f31092ac37b9d455f633861b6ae74b9ef3e737609755ff207a4df084e7"
- }
+  "Signatures": {
+    "haveged.service": "bdc275f31092ac37b9d455f633861b6ae74b9ef3e737609755ff207a4df084e7",
+    "haveged-1.9.22.tar.gz": "864dd83eed4141059dd33d32433ffab50ac36b52482da39ece081ca94642af02"
+  }
 }

SPECS/haveged/haveged.spec

@@ -2,7 +2,7 @@
 
 Summary:        A Linux entropy source using the HAVEGE algorithm
 Name:           haveged
-Version:        1.9.17
+Version:        1.9.22
 Release:        1%{?dist}
 License:        GPLv3+
 Vendor:         Microsoft Corporation
@@ -102,6 +102,9 @@ rm -rf %{buildroot}%{_libdir}/libhavege.*a
 
 
 %changelog
+* Fri May 22 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.9.22-1
+- Auto-upgrade to 1.9.22 - for CVE-2026-41054
+
 * Thu Feb 17 2022 Cameron Baird <cameronbaird@microsoft.com> - 1.9.17-1
 - Update to v1.9.17
 - Configure build to run with additional tests

cgmanifest.json

@@ -5300,8 +5300,8 @@
         "type": "other",
         "other": {
           "name": "haveged",
-          "version": "1.9.17",
-          "downloadUrl": "https://github.com/jirka-h/haveged/archive/v1.9.17/haveged-1.9.17.tar.gz"
+          "version": "1.9.22",
+          "downloadUrl": "https://github.com/jirka-h/haveged/archive/v1.9.22/haveged-1.9.22.tar.gz"
         }
       }
     },