rpms/mrtg
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Multi Router Traffic Grapher
11 Commits 8 Branches 14 Tags 248 KiB
Shell 100%
c9s
Go to file
RHEL Packaging Agent 6ad7ad34ac Fix CVE-2026-72694: symlink-following chown of pid file in daemon mode 
Backport upstream commit 30e19216bf to fix a symlink-following
vulnerability (CWE-59) in mrtg's pid file handling when running
in daemon mode as root. The patch hardens create_pid() to refuse
symlinks, use O_WRONLY|O_CREAT|O_EXCL for atomic file creation,
and chown the open filehandle instead of the path. The
demonize_me() function is also hardened to refuse symlinks when
writing the pid file.

CVE: CVE-2026-72694
Upstream patches:
 - 30e19216bf.patch
Resolves: RHEL-236046

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-09-02 06:46:48 +00:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
filter-provides-mrtg.sh RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
filter-requires-mrtg.sh RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
gating.yaml Add gating.yaml 2024-02-05 09:26:21 +01:00
mrtg-2.15.0-lib64.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
mrtg-2.17.2-socket6-fix.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
mrtg-2.17.4-cfgmaker-ifhighspeed.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
mrtg-2.17.7-CVE-2026-72694.patch Fix CVE-2026-72694: symlink-following chown of pid file in daemon mode 2026-09-02 06:46:48 +00:00
mrtg-2.17.7-traffic-sum-man-option.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
mrtg-httpd.conf RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
mrtg.cfg RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
mrtg.crond.in RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
mrtg.service Remove obsolete syslog references from service file 2024-02-05 09:35:44 +01:00
mrtg.spec Fix CVE-2026-72694: symlink-following chown of pid file in daemon mode 2026-09-02 06:46:48 +00:00
mrtg.timer RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00
mrtg.tmpfiles Add support for Image Mode 2026-01-26 16:27:28 +01:00
sources RHEL 9.0.0 Alpha bootstrap 2020-10-15 20:34:56 +02:00