network-manager-vpnc - Debian Package Tracker

general

source: network-manager-vpnc (main)
version: 1.4.0-4
maintainer: Utopia Maintenance Team (archive) (DMD)
uploaders: Michael Biebl [DMD]
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.2.6-3
oldstable: 1.2.8-4
stable: 1.4.0-2
unstable: 1.4.0-4

versioned links

1.2.6-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.2.8-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.4.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.4.0-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

network-manager-vpnc (7 bugs: 0, 5, 2, 0)
network-manager-vpnc-gnome (4 bugs: 0, 3, 1, 0)

action needed

2 security issues in trixie high

There are 2 open security issues in trixie.

2 important issues:

CVE-2026-91840: A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.
CVE-2026-91841: A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.

Created: 2026-09-16 Last update: 2026-10-16 18:30

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2026-91840: A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.
CVE-2026-91841: A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.

Created: 2026-09-16 Last update: 2026-10-16 18:30

2 security issues in bookworm high

There are 2 open security issues in bookworm.

2 important issues:

CVE-2026-91840: A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.
CVE-2026-91841: A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.

Created: 2026-09-16 Last update: 2026-10-16 18:30

2 security issues in forky high

There are 2 open security issues in forky.

2 important issues:

CVE-2026-91840: A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.
CVE-2026-91841: A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.

Created: 2026-09-16 Last update: 2026-09-26 04:19

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2026-10-16 Last update: 2026-10-21 14:33

AppStream hints: 3 warnings for network-manager-vpnc-gnome normal

AppStream found metadata issues for packages:

network-manager-vpnc-gnome: 3 warnings

You should get rid of them to provide more metadata about this software.

Created: 2020-09-03 Last update: 2026-08-24 09:00

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2025-08-16 Last update: 2025-08-16 11:34

debian/patches: 1 patch to forward upstream low

Among the 1 debian patch available in version 1.4.0-4 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2025-03-16 Last update: 2026-07-23 06:30

testing migrations

excuses:
- Migration status for network-manager-vpnc (- to 1.4.0-4): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating network-manager-vpnc would introduce bugs in testing: #1148113
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/n/network-manager-vpnc.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- ∙ ∙ 90 days old (needed 5 days)
- Not considered

news

[rss feed]

[2026-10-17] network-manager-vpnc REMOVED from testing (Debian testing watch)
[2026-07-28] network-manager-vpnc 1.4.0-4 MIGRATED to testing (Debian testing watch)
[2026-07-22] Accepted network-manager-vpnc 1.4.0-4 (source) into unstable (Michael Biebl)
[2025-08-21] network-manager-vpnc 1.4.0-3 MIGRATED to testing (Debian testing watch)
[2025-08-15] Accepted network-manager-vpnc 1.4.0-3 (source) into unstable (Michael Biebl)
[2025-03-21] network-manager-vpnc 1.4.0-2 MIGRATED to testing (Debian testing watch)
[2025-03-15] Accepted network-manager-vpnc 1.4.0-2 (source) into unstable (Michael Biebl)
[2024-11-21] network-manager-vpnc 1.4.0-1 MIGRATED to testing (Debian testing watch)
[2024-11-15] Accepted network-manager-vpnc 1.4.0-1 (source) into unstable (Michael Biebl)
[2024-09-11] network-manager-vpnc 1.2.8-8 MIGRATED to testing (Debian testing watch)
[2024-09-05] Accepted network-manager-vpnc 1.2.8-8 (source) into unstable (Michael Biebl)
[2023-10-26] network-manager-vpnc 1.2.8-7 MIGRATED to testing (Debian testing watch)
[2023-10-21] Accepted network-manager-vpnc 1.2.8-7 (source) into unstable (Michael Biebl)
[2023-10-20] Accepted network-manager-vpnc 1.2.8-6 (source) into unstable (Michael Biebl)
[2023-08-22] network-manager-vpnc 1.2.8-5 MIGRATED to testing (Debian testing watch)
[2023-08-16] Accepted network-manager-vpnc 1.2.8-5 (source) into unstable (Michael Biebl)
[2022-12-25] network-manager-vpnc 1.2.8-4 MIGRATED to testing (Debian testing watch)
[2022-12-19] Accepted network-manager-vpnc 1.2.8-4 (source) into unstable (Michael Biebl)
[2022-04-04] network-manager-vpnc 1.2.8-3 MIGRATED to testing (Debian testing watch)
[2022-03-30] Accepted network-manager-vpnc 1.2.8-3 (source) into unstable (Michael Biebl)
[2022-03-18] network-manager-vpnc 1.2.8-2 MIGRATED to testing (Debian testing watch)
[2022-03-12] Accepted network-manager-vpnc 1.2.8-2 (source) into unstable (Michael Biebl)
[2022-03-12] Accepted network-manager-vpnc 1.2.8-1 (source) into unstable (Michael Biebl)
[2021-08-30] network-manager-vpnc 1.2.6-4 MIGRATED to testing (Debian testing watch)
[2021-08-25] Accepted network-manager-vpnc 1.2.6-4 (source) into unstable (Michael Biebl)
[2020-05-10] network-manager-vpnc 1.2.6-3 MIGRATED to testing (Debian testing watch)
[2020-05-05] Accepted network-manager-vpnc 1.2.6-3 (source) into unstable (Michael Biebl)
[2018-12-03] network-manager-vpnc 1.2.6-2 MIGRATED to testing (Debian testing watch)
[2018-11-27] Accepted network-manager-vpnc 1.2.6-2 (source) into unstable (Michael Biebl)
[2018-07-31] Accepted network-manager-vpnc 0.9.10.0-1+deb8u1 (source amd64) into oldstable (Mike Gabriel)

bugs [bug history graph]

all: 13
RC: 1
I&N: 9
M&W: 3
F&P: 0
patch: 0

links

homepage
lintian (0, 2)
buildd: logs, cross
popcon
browse source code
other distros
security tracker
screenshots
l10n (-, 49)
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.4.0-4
39 bugs (3 patches)