Fun #HaikuOS fact of the day: for the first time (as far as I know), we are listed in the affected systems for a CVE. Upon closer inspection, it turns out the affected code (a bug in telnetd dating back to 1994) is behindea compiler guard and not actually enabled in our version. So, Haiku is actually safe from this CVE for which there is no actual exploit also on other systems.

https://discuss.haiku-os.org/t/cve-2026-32746/18926/9

Cve-2026-32746

Nevermind,one can’t even easily build telnetd with LINEMODE enabled because that leads to other errors. We don’t have the termios c_lflag called EXTPROC needed in sys_term.c line 434. Neither do we have the TIOCPKT_IOCTL needed in telnetd.c line 1101. That all first needs to be fixed before we can enable the code that makes Haiku vulnerable to the CVE,therefore I’d say we’re pretty safe.

Haiku Community