Red Hat Product Errata RHSA-2026:57600 - Security Advisory
Issued:
2026-08-20
Updated:
2026-08-20

RHSA-2026:57600 - Security Advisory

Synopsis

Important: mrtg security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for mrtg is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Multi Router Traffic Grapher (MRTG) monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic.

Security Fix(es):

  • mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation (CVE-2026-72694)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2460973 - CVE-2026-72694 mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation

Red Hat Enterprise Linux for x86_64 9

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
x86_64
mrtg-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: 5e648135862220cc49d9fca40606d0523ed041ebdb3b547a5023a048ba6882b8
mrtg-debuginfo-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: 3456efa1a95eff94eeac0a2b5de3535839b88eaa73585281cc66d1712a841e0e
mrtg-debugsource-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: c716ba2b0b75cf04925f1fa48aca639b6333efaaad0d6bd6dff616e0db388039

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
x86_64
mrtg-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: 5e648135862220cc49d9fca40606d0523ed041ebdb3b547a5023a048ba6882b8
mrtg-debuginfo-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: 3456efa1a95eff94eeac0a2b5de3535839b88eaa73585281cc66d1712a841e0e
mrtg-debugsource-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: c716ba2b0b75cf04925f1fa48aca639b6333efaaad0d6bd6dff616e0db388039

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
s390x
mrtg-2.17.7-12.el9_8.1.s390x.rpm SHA-256: 8333e5d135f11ec8a8e68609206da51af85b51f2f19829af02db47a9639a4e1b
mrtg-debuginfo-2.17.7-12.el9_8.1.s390x.rpm SHA-256: fc424a44a076aa28a90f54b7d9e91f01720f8daab6a1c517dad066eea52ff053
mrtg-debugsource-2.17.7-12.el9_8.1.s390x.rpm SHA-256: cc0f400083c59e28ecc96db5dc45f12cc4a47bfc946b74826b00c914fdb4241b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
s390x
mrtg-2.17.7-12.el9_8.1.s390x.rpm SHA-256: 8333e5d135f11ec8a8e68609206da51af85b51f2f19829af02db47a9639a4e1b
mrtg-debuginfo-2.17.7-12.el9_8.1.s390x.rpm SHA-256: fc424a44a076aa28a90f54b7d9e91f01720f8daab6a1c517dad066eea52ff053
mrtg-debugsource-2.17.7-12.el9_8.1.s390x.rpm SHA-256: cc0f400083c59e28ecc96db5dc45f12cc4a47bfc946b74826b00c914fdb4241b

Red Hat Enterprise Linux for Power, little endian 9

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
ppc64le
mrtg-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 6a202821381268adc4d02d7e06c0963b7bb9017536cd9e319e92f52d065c0d01
mrtg-debuginfo-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 1fac53827c45bbe21cc03cdfbca3fc456ad460c51e7710f402d27350dbb0f1e2
mrtg-debugsource-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 38a1051febe859a83140e459765d74c4373ab109f276387706b6e458c77d6ed7

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
ppc64le
mrtg-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 6a202821381268adc4d02d7e06c0963b7bb9017536cd9e319e92f52d065c0d01
mrtg-debuginfo-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 1fac53827c45bbe21cc03cdfbca3fc456ad460c51e7710f402d27350dbb0f1e2
mrtg-debugsource-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 38a1051febe859a83140e459765d74c4373ab109f276387706b6e458c77d6ed7

Red Hat Enterprise Linux for ARM 64 9

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
aarch64
mrtg-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: 232b8c6da0e0c5c4c6765b6184efcfb03e3fb0c5c41469552c7a236e577a2c77
mrtg-debuginfo-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: a7079ea5016b16166607dfdd43ff61f574ba6da4d989ed04647faf642b15a230
mrtg-debugsource-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: 257985efbfeb02d32c0d27ff37508165be5fe8d234a1aaea066f9b66257bf309

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
aarch64
mrtg-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: 232b8c6da0e0c5c4c6765b6184efcfb03e3fb0c5c41469552c7a236e577a2c77
mrtg-debuginfo-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: a7079ea5016b16166607dfdd43ff61f574ba6da4d989ed04647faf642b15a230
mrtg-debugsource-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: 257985efbfeb02d32c0d27ff37508165be5fe8d234a1aaea066f9b66257bf309

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
ppc64le
mrtg-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 6a202821381268adc4d02d7e06c0963b7bb9017536cd9e319e92f52d065c0d01
mrtg-debuginfo-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 1fac53827c45bbe21cc03cdfbca3fc456ad460c51e7710f402d27350dbb0f1e2
mrtg-debugsource-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 38a1051febe859a83140e459765d74c4373ab109f276387706b6e458c77d6ed7

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
x86_64
mrtg-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: 5e648135862220cc49d9fca40606d0523ed041ebdb3b547a5023a048ba6882b8
mrtg-debuginfo-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: 3456efa1a95eff94eeac0a2b5de3535839b88eaa73585281cc66d1712a841e0e
mrtg-debugsource-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: c716ba2b0b75cf04925f1fa48aca639b6333efaaad0d6bd6dff616e0db388039

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
aarch64
mrtg-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: 232b8c6da0e0c5c4c6765b6184efcfb03e3fb0c5c41469552c7a236e577a2c77
mrtg-debuginfo-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: a7079ea5016b16166607dfdd43ff61f574ba6da4d989ed04647faf642b15a230
mrtg-debugsource-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: 257985efbfeb02d32c0d27ff37508165be5fe8d234a1aaea066f9b66257bf309

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
s390x
mrtg-2.17.7-12.el9_8.1.s390x.rpm SHA-256: 8333e5d135f11ec8a8e68609206da51af85b51f2f19829af02db47a9639a4e1b
mrtg-debuginfo-2.17.7-12.el9_8.1.s390x.rpm SHA-256: fc424a44a076aa28a90f54b7d9e91f01720f8daab6a1c517dad066eea52ff053
mrtg-debugsource-2.17.7-12.el9_8.1.s390x.rpm SHA-256: cc0f400083c59e28ecc96db5dc45f12cc4a47bfc946b74826b00c914fdb4241b

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
x86_64
mrtg-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: 5e648135862220cc49d9fca40606d0523ed041ebdb3b547a5023a048ba6882b8
mrtg-debuginfo-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: 3456efa1a95eff94eeac0a2b5de3535839b88eaa73585281cc66d1712a841e0e
mrtg-debugsource-2.17.7-12.el9_8.1.x86_64.rpm SHA-256: c716ba2b0b75cf04925f1fa48aca639b6333efaaad0d6bd6dff616e0db388039

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
aarch64
mrtg-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: 232b8c6da0e0c5c4c6765b6184efcfb03e3fb0c5c41469552c7a236e577a2c77
mrtg-debuginfo-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: a7079ea5016b16166607dfdd43ff61f574ba6da4d989ed04647faf642b15a230
mrtg-debugsource-2.17.7-12.el9_8.1.aarch64.rpm SHA-256: 257985efbfeb02d32c0d27ff37508165be5fe8d234a1aaea066f9b66257bf309

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
ppc64le
mrtg-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 6a202821381268adc4d02d7e06c0963b7bb9017536cd9e319e92f52d065c0d01
mrtg-debuginfo-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 1fac53827c45bbe21cc03cdfbca3fc456ad460c51e7710f402d27350dbb0f1e2
mrtg-debugsource-2.17.7-12.el9_8.1.ppc64le.rpm SHA-256: 38a1051febe859a83140e459765d74c4373ab109f276387706b6e458c77d6ed7

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
mrtg-2.17.7-12.el9_8.1.src.rpm SHA-256: 74469e5e3bd66a1c5dcfabf97538fd8d38d0c32b7dfb81067b280e73ef686ee6
s390x
mrtg-2.17.7-12.el9_8.1.s390x.rpm SHA-256: 8333e5d135f11ec8a8e68609206da51af85b51f2f19829af02db47a9639a4e1b
mrtg-debuginfo-2.17.7-12.el9_8.1.s390x.rpm SHA-256: fc424a44a076aa28a90f54b7d9e91f01720f8daab6a1c517dad066eea52ff053
mrtg-debugsource-2.17.7-12.el9_8.1.s390x.rpm SHA-256: cc0f400083c59e28ecc96db5dc45f12cc4a47bfc946b74826b00c914fdb4241b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.