-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 22 Dec 2025 20:05:52 +0100
Source: network-manager-openvpn
Architecture: source
Version: 1.12.5-1
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Michael Biebl <biebl@debian.org>
Changes:
network-manager-openvpn (1.12.5-1) unstable; urgency=medium
.
* New upstream version 1.12.5
- Verify file permissions for private connections to prevent unprivileged
user from using other user's certs (CVE-2025-9615)
* Bump minimum required version of network-manager to 1.54.3.
This ensures we have a fix for CVE-2025-9615.
* Rely on systemd-sysusers instead of adduser
Checksums-Sha1:
04f73ae26a6d0a2208517168f245a94b7d796673 2437 network-manager-openvpn_1.12.5-1.dsc
7af9e028e2089c99502bccbc8e4acd4c6a244103 731044 network-manager-openvpn_1.12.5.orig.tar.xz
6317066114e6299913079af375cf05aca00288ae 8056 network-manager-openvpn_1.12.5-1.debian.tar.xz
99268c5ff01ecd0d2b4b4abe9188a650ce37a089 15288 network-manager-openvpn_1.12.5-1_source.buildinfo
Checksums-Sha256:
75b073d052421fbeebdd4ccf55c9303d72d24e7d3a3687f67ee962147edc667a 2437 network-manager-openvpn_1.12.5-1.dsc
ce32e38b0500eddf2fc8072ca17679817fc2d35eb91f6ff7b9904209c14b5afd 731044 network-manager-openvpn_1.12.5.orig.tar.xz
57e4ad386083b1f3f576dcf010e499e12078bbb26bc6dcb78c6e97ab12ccfe0a 8056 network-manager-openvpn_1.12.5-1.debian.tar.xz
e80ead00cfb3d1713f5a88ef9eb260d55fd52d0f4f91c143c8d225d071f166ac 15288 network-manager-openvpn_1.12.5-1_source.buildinfo
Files:
530398720fa5441230d6a7fc6b53086f 2437 net optional network-manager-openvpn_1.12.5-1.dsc
d2e46b68987128d4a49f6ba991539004 731044 net optional network-manager-openvpn_1.12.5.orig.tar.xz
1c71b4beef4789ae28f363147f3a4267 8056 net optional network-manager-openvpn_1.12.5-1.debian.tar.xz
21baf416d99b8565853c1596dc30dc87 15288 net optional network-manager-openvpn_1.12.5-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=j81B
-----END PGP SIGNATURE-----
