Register | Log in

mrtg

Multi Router Traffic Grapher

Choose email to subscribe with

general

source: mrtg (main)
version: 2.17.10-14
maintainer: Joao Eriberto Mota Filho (DMD)
arch: all any
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.17.7-2+deb11u1
oldstable: 2.17.10-5+deb12u2
stable: 2.17.10-13+deb13u1
testing: 2.17.10-14
unstable: 2.17.10-14

versioned links

2.17.7-2+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.17.10-5+deb12u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.17.10-13+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.17.10-14: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

mrtg (3 bugs: 0, 2, 1, 0)
mrtg-contrib (1 bugs: 0, 1, 0, 0)

action needed

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-72694: A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (symlink) following vulnerability. By influencing or pre-placing a symlink in the process ID (PID) file path, the attacker can trick the root process into changing the ownership of an arbitrary existing file to the daemon user. This can lead to local privilege escalation, allowing unauthorized access to or modification of sensitive files.

Created: 2026-08-12 Last update: 2026-08-12 09:00

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-72694: A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (symlink) following vulnerability. By influencing or pre-placing a symlink in the process ID (PID) file path, the attacker can trick the root process into changing the ownership of an arbitrary existing file to the daemon user. This can lead to local privilege escalation, allowing unauthorized access to or modification of sensitive files.

Created: 2026-08-12 Last update: 2026-08-12 09:00

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-72694: A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (symlink) following vulnerability. By influencing or pre-placing a symlink in the process ID (PID) file path, the attacker can trick the root process into changing the ownership of an arbitrary existing file to the daemon user. This can lead to local privilege escalation, allowing unauthorized access to or modification of sensitive files.

Created: 2026-08-12 Last update: 2026-08-12 09:00

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2026-72694: A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (symlink) following vulnerability. By influencing or pre-placing a symlink in the process ID (PID) file path, the attacker can trick the root process into changing the ownership of an arbitrary existing file to the daemon user. This can lead to local privilege escalation, allowing unauthorized access to or modification of sensitive files.

Created: 2026-08-12 Last update: 2026-08-12 09:00

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-72694: A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (symlink) following vulnerability. By influencing or pre-placing a symlink in the process ID (PID) file path, the attacker can trick the root process into changing the ownership of an arbitrary existing file to the daemon user. This can lead to local privilege escalation, allowing unauthorized access to or modification of sensitive files.

Created: 2026-08-12 Last update: 2026-08-12 09:00

Depends on packages which need a new maintainer normal

The packages that mrtg depends on which need a new maintainer are:

cricket (#737290)
- Suggests: cricket

Created: 2019-11-22 Last update: 2026-08-13 00:32

debian/patches: 3 patches to forward upstream low

Among the 9 debian patches available in version 2.17.10-14 of the package, we noticed the following issues:

3 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2025-05-20 Last update: 2025-09-30 09:33

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-03-31 15:01

news

[2025-10-19] Accepted mrtg 2.17.10-13+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Joao Eriberto Mota Filho)
[2025-10-02] mrtg 2.17.10-14 MIGRATED to testing (Debian testing watch)
[2025-09-29] Accepted mrtg 2.17.10-14 (source) into unstable (Joao Eriberto Mota Filho)
[2025-06-09] mrtg 2.17.10-13 MIGRATED to testing (Debian testing watch)
[2025-05-19] Accepted mrtg 2.17.10-13 (source) into unstable (Joao Eriberto Mota Filho)
[2023-10-07] Accepted mrtg 2.17.10-5+deb12u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Joao Eriberto Mota Filho)
[2023-09-27] mrtg 2.17.10-12 MIGRATED to testing (Debian testing watch)
[2023-09-24] Accepted mrtg 2.17.10-12 (source) into unstable (Joao Eriberto Mota Filho)
[2023-09-22] mrtg 2.17.10-11 MIGRATED to testing (Debian testing watch)
[2023-09-19] Accepted mrtg 2.17.10-11 (source) into unstable (Joao Eriberto Mota Filho)
[2023-09-10] mrtg 2.17.10-10 MIGRATED to testing (Debian testing watch)
[2023-09-08] Accepted mrtg 2.17.10-10 (source) into unstable (Joao Eriberto Mota Filho)
[2023-07-18] mrtg 2.17.10-9 MIGRATED to testing (Debian testing watch)
[2023-07-15] Accepted mrtg 2.17.10-9 (source) into unstable (Joao Eriberto Mota Filho)
[2023-07-13] Accepted mrtg 2.17.10-5+deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Joao Eriberto Mota Filho)
[2023-07-13] mrtg 2.17.10-8 MIGRATED to testing (Debian testing watch)
[2023-07-10] Accepted mrtg 2.17.10-8 (source) into unstable (Joao Eriberto Mota Filho)
[2023-07-09] Accepted mrtg 2.17.10-7 (source) into unstable (Joao Eriberto Mota Filho)
[2023-06-28] mrtg 2.17.10-6 MIGRATED to testing (Debian testing watch)
[2023-06-26] Accepted mrtg 2.17.10-6 (source) into unstable (Joao Eriberto Mota Filho)
[2023-05-09] mrtg 2.17.10-5 MIGRATED to testing (Debian testing watch)
[2023-04-19] Accepted mrtg 2.17.10-5 (source) into unstable (Joao Eriberto Mota Filho)
[2022-09-12] mrtg 2.17.10-4 MIGRATED to testing (Debian testing watch)
[2022-09-09] Accepted mrtg 2.17.10-4 (source) into unstable (Joao Eriberto Mota Filho)
[2022-02-01] Accepted mrtg 2.17.10-3~bpo11+1 (source) into bullseye-backports (Joao Eriberto Mota Filho)
[2022-01-31] mrtg 2.17.10-3 MIGRATED to testing (Debian testing watch)
[2022-01-29] mrtg 2.17.10-2 MIGRATED to testing (Debian testing watch)
[2022-01-29] mrtg 2.17.10-2 MIGRATED to testing (Debian testing watch)
[2022-01-29] Accepted mrtg 2.17.10-3 (source) into unstable (Joao Eriberto Mota Filho)
[2022-01-25] Accepted mrtg 2.17.10-2 (source) into unstable (Joao Eriberto Mota Filho)

1
2

bugs [bug history graph]

all: 4
RC: 0
I&N: 3
M&W: 1
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
screenshots
l10n (95, -)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.17.10-14

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing