-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 06 Sep 2026 16:20:10 +1000
Source: network-manager-l2tp
Binary: network-manager-l2tp network-manager-l2tp-dbgsym network-manager-l2tp-gnome network-manager-l2tp-gnome-dbgsym
Architecture: i386
Version: 1.20.20-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Douglas Kosovic <doug@uq.edu.au>
Description:
 network-manager-l2tp - network management framework (L2TP plugin core)
 network-manager-l2tp-gnome - network management framework (L2TP plugin GNOME GUI)
Changes:
 network-manager-l2tp (1.20.20-2+deb13u1) trixie-security; urgency=high
 .
   * Security fixes for local privilege escalation to root involving:
     - Injection of '\n' or '\r' control characters written into
     /run/nm-l2tp-<uuid>/ipsec.conf (CVE-2026-19624)
     - Quote break-out via the 'user' string property written into
     /run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75131)
     - Partial strtol() on mtu/mru/mrru properties allow trailing string
     injection written into /run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75883)
Checksums-Sha1:
 ab038893e04f074c42aa2cf47b1780e9e77acda7 179780 network-manager-l2tp-dbgsym_1.20.20-2+deb13u1_i386.deb
 309d153bfe070d95b5667f0ecae040770ab26d07 208716 network-manager-l2tp-gnome-dbgsym_1.20.20-2+deb13u1_i386.deb
 c86d9abd58c3c38e6ca071cd35ab3e6cc509d07c 45584 network-manager-l2tp-gnome_1.20.20-2+deb13u1_i386.deb
 eec53d3ee2afaec460fbc08d70de46b8a3a4768b 16654 network-manager-l2tp_1.20.20-2+deb13u1_i386-buildd.buildinfo
 9dd3e6d4db7fd8660979cd994102c5c48bcd403f 156032 network-manager-l2tp_1.20.20-2+deb13u1_i386.deb
Checksums-Sha256:
 d634cd0aedb361816f64ca8eaf83601987c6b72b22ae0052ed92a2af3876d60c 179780 network-manager-l2tp-dbgsym_1.20.20-2+deb13u1_i386.deb
 c846f40fca785933882142ac40e965fdfca3811fbf0659dba341f30674b8d535 208716 network-manager-l2tp-gnome-dbgsym_1.20.20-2+deb13u1_i386.deb
 231babde02294543257ebb9b9678198ce55dea2575dae8f7cb9b42854c3e252f 45584 network-manager-l2tp-gnome_1.20.20-2+deb13u1_i386.deb
 4b951305932b788f89f202309c132dce8bb1787560afee6aebd5289854277551 16654 network-manager-l2tp_1.20.20-2+deb13u1_i386-buildd.buildinfo
 4b62bccd4a4a1e4d83ea6faecd21c40af6051bcc8a45315592d35b65a5bffa49 156032 network-manager-l2tp_1.20.20-2+deb13u1_i386.deb
Files:
 24a39d705567db6153c3514b4b4971dc 179780 debug optional network-manager-l2tp-dbgsym_1.20.20-2+deb13u1_i386.deb
 f2f59066467e73111439e1153def885d 208716 debug optional network-manager-l2tp-gnome-dbgsym_1.20.20-2+deb13u1_i386.deb
 f432fc002d0585fc1be35406e30cf728 45584 net optional network-manager-l2tp-gnome_1.20.20-2+deb13u1_i386.deb
 f1c2972e6d43b89a292ad39b58615882 16654 net optional network-manager-l2tp_1.20.20-2+deb13u1_i386-buildd.buildinfo
 51b8a460d90637c518213db3fe32c449 156032 net optional network-manager-l2tp_1.20.20-2+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmqfDAYACgkQYg9P9sm2
dfGSMxAAhk2gGB9T5rzIRr8ejilYvWwBEeViZq0LDz1MhbmF8vj3eT4zkN8PjFi9
q8dfaHSNQz0aZEVWyDiRsVdBH1YTC1jFKwhEXI1aze6L7HKzLSwAVPvYCStAzNtO
K1jd3UH5IMPcB3eY11K8T3OzSdA2rXj0wc/UFqtQTkOAimMCQosJhq+luM7YjQCA
IVS8tzQHDM8zJjwgCH6iNecwQ0k1BLyA2OOsdf5HiLEbLFsZolYpTlxnk56ut38X
eqwxV19bTBGMU13IIcuKTNntftKFMyqH7kty+yChmyigHPNwcba9756Uy1doh5+S
U7vYMwbIxGIjeDzlJZcdG0khotZ4pO5YZ6ayJ+6c7ECVZ6xOObdxYZew9fBJ2jid
Xg01CCSogsZ+9xDzmCg8icYdMTLJJhiHUEY72guFd+qUScyqp4OWxJ28qT2/ojKj
Sd5ER6sllBYyovgHcVof7AcHrBA2/ugyBaesZfdbts0A8JlMn/Bv4R4AE53quhox
ukzCbud6rdujzkR0LlY3NnIOQdYpukZ5rys17pJvV4l9tJO5eoH1lVj4YXsYkuWO
J3a+fhjXJ14bM9SIFlNNcfBb1nSbRZB/Ip3/kEvv/37zY4SqPTMmvswXnjB4EByn
G81170NqWgbGYeVrqsT7PkKtov8FnnW7/aPIx/6h0PVCl9NA8dk=
=J4Zq
-----END PGP SIGNATURE-----