-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 06 Sep 2026 16:20:10 +1000 Source: network-manager-l2tp Binary: network-manager-l2tp network-manager-l2tp-dbgsym network-manager-l2tp-gnome network-manager-l2tp-gnome-dbgsym Architecture: amd64 Version: 1.20.20-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Douglas Kosovic Description: network-manager-l2tp - network management framework (L2TP plugin core) network-manager-l2tp-gnome - network management framework (L2TP plugin GNOME GUI) Changes: network-manager-l2tp (1.20.20-2+deb13u1) trixie-security; urgency=high . * Security fixes for local privilege escalation to root involving: - Injection of '\n' or '\r' control characters written into /run/nm-l2tp-/ipsec.conf (CVE-2026-19624) - Quote break-out via the 'user' string property written into /run/nm-l2tp-/ppp-options (CVE-2026-75131) - Partial strtol() on mtu/mru/mrru properties allow trailing string injection written into /run/nm-l2tp-/ppp-options (CVE-2026-75883) Checksums-Sha1: c54ec5a8b712df010af7f32cb5f9d03110191b75 213188 network-manager-l2tp-dbgsym_1.20.20-2+deb13u1_amd64.deb f13439fd0f2d67c3e7b0cee278212dd73870c63b 255120 network-manager-l2tp-gnome-dbgsym_1.20.20-2+deb13u1_amd64.deb 9dde122ba47673784042620f529469fc2825d5e1 42732 network-manager-l2tp-gnome_1.20.20-2+deb13u1_amd64.deb da4e5e11a0b9160bfec41245a7fad34c1243dd34 16759 network-manager-l2tp_1.20.20-2+deb13u1_amd64-buildd.buildinfo 615deb8bf9ef83bc89b1e1cc2e58555da0580aec 152232 network-manager-l2tp_1.20.20-2+deb13u1_amd64.deb Checksums-Sha256: 07d512792fdcc22ca31306b49d988bdbcd3772e7233e29df0287f13f21a00925 213188 network-manager-l2tp-dbgsym_1.20.20-2+deb13u1_amd64.deb 3ce077fb75d3f56a58471dd98d2dbcc4b9e29ac0e1012062fe7d443f2a6afa90 255120 network-manager-l2tp-gnome-dbgsym_1.20.20-2+deb13u1_amd64.deb a0946832c6156c2f2c7ec435f2271829fa33931c031f83114db4a1b1e4fc1268 42732 network-manager-l2tp-gnome_1.20.20-2+deb13u1_amd64.deb e082f702ccb92e233b6aa34b21cc29174b57554d1781f3fa5a3c8628e52844d7 16759 network-manager-l2tp_1.20.20-2+deb13u1_amd64-buildd.buildinfo afe3d8cbb2db7d28bea86a2555ab9f015a49ac3803b103f8067dcd6b4c9f682a 152232 network-manager-l2tp_1.20.20-2+deb13u1_amd64.deb Files: 56a858801e5a4b5607003058b8535cb6 213188 debug optional network-manager-l2tp-dbgsym_1.20.20-2+deb13u1_amd64.deb 2f8d3b239608796a231036402372782b 255120 debug optional network-manager-l2tp-gnome-dbgsym_1.20.20-2+deb13u1_amd64.deb 7963a3f846d7e39db7aac4d14cd62ac1 42732 net optional network-manager-l2tp-gnome_1.20.20-2+deb13u1_amd64.deb 4b20697099daae061ee1fe3b158823c1 16759 net optional network-manager-l2tp_1.20.20-2+deb13u1_amd64-buildd.buildinfo 0e27ef7187155ce5c68791c62503c1cd 152232 net optional network-manager-l2tp_1.20.20-2+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmqfDH8ACgkQTwt/65ON 6zcjyw//fd3vQc4X3k1S8TJTHplEdGbkZChH68tYkTfo5eZOTrZ2lRCF2s+ai8go wrpKwokkPCPzJ8r7F7F/eZp7tqwDZ103hjfpq/SnqQcxUNejaJj6ttVXXAdSyiht BlvrxmjvQNcj6B2etPUmPXUNDW7NT/ssdzj4iKlFluZx04/5ay6Rq6PirrWcr/hz MKZVksryR65Ri3j4MuHrWZg780EGerK3IHE6b9c/arRCPIgQ3fp2tkcPsSwHdj40 kJxSD4jASCisR/zLRO3C7DYzoMKNB8GKbZzrqaIrdFDpfWciZAYxQcV9Vg1e3xU9 1WVnUnzYtUoMSRPnezkcBK4Te6iujPIUk8unP95gRqIjciXu6Dt7LgSw3Iwcm+hf XEVlHdxSC+FaEJI1UW5n2YknA3AvpcQ6S0Vuadss8gDBpkq3LZYAnWMZJOzYz/1r uannngdOXPS0AoPHCNIGhUh8ivoPsbP+futt20afWLmyLfUisTj1BQ8HqKQmImSC hFQPBCHQFGrrslha7HKSRL2ykPZxtug515uATRk2q7c6jdAOcVBpVpUt3cCafAsU wG9qlNFyv6wBLJhjNhQyf+h7OOXipHicF3wPyl9/7ck/iY7pvmmMsNKzkISn6I/M G2mOEKF4nRai1uJgfOgsvOtUlUyl8VP1hSZM2mG0RuBEtN3eChA= =s9uT -----END PGP SIGNATURE-----