Skip to content

version 1.2.24 release

Choose a tag to compare

@dkosovic dkosovic released this 14 Sep 10:40

Compatible with NetworkManager 1.2 and later.

Summary of changes since NetworkManager-l2tp 1.2.22:

  • Security fixes for local privilege escalation to root involving:
    • Quote break-out via the 'user' string property written into /run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75131)
    • Partial strtol() on mtu and mru properties allow trailing string injection written into /run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75883)
  • Merged translations from NetworkManager-l2tp-1.52.6.