network-manager-sstp - Debian Package Tracker

general

source: network-manager-sstp (main)
version: 1.3.2-1
maintainer: Eivind Naess (DMD)
std-ver: 4.6.0.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.3.0-2
stable: 1.3.2-1
unstable: 1.3.2-1

versioned links

1.3.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

network-manager-sstp (1 bugs: 1, 0, 0, 0)
network-manager-sstp-gnome (1 bugs: 1, 0, 0, 0)

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

In debian/watch no matching files for watch source
  https://gitlab.gnome.org/GNOME/network-manager-sstp/tags?sort=updated_desc

Created: 2025-11-26 Last update: 2026-10-07 10:34

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-91838: A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped characters are then processed by the `pppd` daemon, which runs with root privileges, allowing the attacker to execute arbitrary commands with elevated permissions when a malicious VPN connection is activated.

Created: 2026-09-16 Last update: 2026-10-02 18:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-91838: A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped characters are then processed by the `pppd` daemon, which runs with root privileges, allowing the attacker to execute arbitrary commands with elevated permissions when a malicious VPN connection is activated.

Created: 2026-09-16 Last update: 2026-10-02 18:30

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-91838: A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped characters are then processed by the `pppd` daemon, which runs with root privileges, allowing the attacker to execute arbitrary commands with elevated permissions when a malicious VPN connection is activated.

Created: 2026-09-16 Last update: 2026-10-02 18:30

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-91838: A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped characters are then processed by the `pppd` daemon, which runs with root privileges, allowing the attacker to execute arbitrary commands with elevated permissions when a malicious VPN connection is activated.

Created: 2026-09-16 Last update: 2026-09-26 04:19

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2026-10-02 Last update: 2026-10-07 12:02

AppStream hints: 1 warning for network-manager-sstp-gnome normal

AppStream found metadata issues for packages:

network-manager-sstp-gnome: 1 warning

You should get rid of them to provide more metadata about this software.

Created: 2022-06-05 Last update: 2025-09-26 02:30

lintian reports 4 warnings normal

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2023-10-30 Last update: 2024-10-05 14:03

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.6.0.1).

Created: 2022-06-04 Last update: 2026-03-31 15:01

testing migrations

excuses:
- Migration status for network-manager-sstp (- to 1.3.2-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating network-manager-sstp would introduce bugs in testing: #1125037, #1147310, #1148112
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/n/network-manager-sstp.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- ∙ ∙ 1044 days old (needed 5 days)
- Not considered

news

[rss feed]

[2026-10-03] network-manager-sstp REMOVED from testing (Debian testing watch)
[2024-08-14] network-manager-sstp 1.3.2-1 MIGRATED to testing (Debian testing watch)
[2024-05-22] network-manager-sstp REMOVED from testing (Debian testing watch)
[2023-12-03] network-manager-sstp 1.3.2-1 MIGRATED to testing (Debian testing watch)
[2023-11-28] Accepted network-manager-sstp 1.3.2-1 (source) into unstable (Eivind Naess) (signed by: bage@debian.org)
[2023-10-27] network-manager-sstp 1.3.1-2 MIGRATED to testing (Debian testing watch)
[2023-10-21] Accepted network-manager-sstp 1.3.1-2 (source) into unstable (Michael Biebl)
[2023-08-27] network-manager-sstp 1.3.1-1 MIGRATED to testing (Debian testing watch)
[2023-08-22] Accepted network-manager-sstp 1.3.1-1 (source) into unstable (Eivind Naess) (signed by: bage@debian.org)
[2022-06-17] network-manager-sstp 1.3.0-2 MIGRATED to testing (Debian testing watch)
[2022-06-06] Accepted network-manager-sstp 1.3.0-2 (source) into unstable (Eivind Naess) (signed by: bage@debian.org)
[2022-06-04] Accepted network-manager-sstp 1.3.0-1 (source i386) into unstable, unstable (Debian FTP Masters) (signed by: bage@debian.org)

bugs [bug history graph]

all: 3
RC: 3
I&N: 0
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 4)
buildd: logs, cross
popcon
browse source code
other distros
security tracker
l10n (-, 45)

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.3.2-1build6
2 bugs (1 patch)