-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 06 Sep 2026 16:20:10 +1000
Source: network-manager-l2tp
Architecture: source
Version: 1.20.20-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Douglas Kosovic <doug@uq.edu.au>
Changed-By: Douglas Kosovic <doug@uq.edu.au>
Changes:
network-manager-l2tp (1.20.20-2+deb13u1) trixie-security; urgency=high
.
* Security fixes for local privilege escalation to root involving:
- Injection of '\n' or '\r' control characters written into
/run/nm-l2tp-<uuid>/ipsec.conf (CVE-2026-19624)
- Quote break-out via the 'user' string property written into
/run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75131)
- Partial strtol() on mtu/mru/mrru properties allow trailing string
injection written into /run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75883)
Checksums-Sha1:
cf0cf67b41420c4056317d3c057e7b0a93c7e411 2588 network-manager-l2tp_1.20.20-2+deb13u1.dsc
fa69bbd3c860d57938d32379ac9395c7a50a8103 501316 network-manager-l2tp_1.20.20.orig.tar.xz
2c01626ab0346f0bcab2956a02c1c85bb98e36bb 833 network-manager-l2tp_1.20.20.orig.tar.xz.asc
eb7e013fd082a678eb8aa41e9645eb888c262f4b 13892 network-manager-l2tp_1.20.20-2+deb13u1.debian.tar.xz
1e6ad29274993eb28619cee2cf6635e01d89d412 16862 network-manager-l2tp_1.20.20-2+deb13u1_amd64.buildinfo
Checksums-Sha256:
7dbd7400fc8b1c1a8b0a997ca266253025a86bfc8ed00264e10a6c4f6acd969b 2588 network-manager-l2tp_1.20.20-2+deb13u1.dsc
0859a35148fb0e1a1b6eef7beafd7c7211e87748af67879f1ecc40a4d01c008c 501316 network-manager-l2tp_1.20.20.orig.tar.xz
809a58f5f9cc4ca961f9d8634c97fe0ce7cf09d49b824910597ae2f000367dbf 833 network-manager-l2tp_1.20.20.orig.tar.xz.asc
61f2de5da5881a00c92e5cddf0cd398ceca0d8e0ee354149cd8e80154a60ebea 13892 network-manager-l2tp_1.20.20-2+deb13u1.debian.tar.xz
0897f9fc048d18a1a434844a2f4877e083cccc54bd62dc7e191b350cb0b5bc7d 16862 network-manager-l2tp_1.20.20-2+deb13u1_amd64.buildinfo
Files:
767bbaad42e3e7988c58682c38677e97 2588 net optional network-manager-l2tp_1.20.20-2+deb13u1.dsc
86ff1880376d0d8ecd10088cc4f88032 501316 net optional network-manager-l2tp_1.20.20.orig.tar.xz
2335298b01aa9f670d30e61d197fe003 833 net optional network-manager-l2tp_1.20.20.orig.tar.xz.asc
d1540efd814e8f98678e4245cdbcdee5 13892 net optional network-manager-l2tp_1.20.20-2+deb13u1.debian.tar.xz
2801d367a9b849d31ac3e94f3577f203 16862 net optional network-manager-l2tp_1.20.20-2+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=qyX4
-----END PGP SIGNATURE-----
