Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package NetworkManager-l2tp for
openSUSE:Factory checked in at 2026-09-17 15:16:14
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/NetworkManager-l2tp (Old)
and /work/SRC/openSUSE:Factory/.NetworkManager-l2tp.new.383539 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "NetworkManager-l2tp"
Thu Sep 17 15:16:14 2026 rev:21 rq:1378414 version:1.52.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/NetworkManager-l2tp/NetworkManager-l2tp.changes
2026-08-22 21:34:49.524377587 +0200
+++
/work/SRC/openSUSE:Factory/.NetworkManager-l2tp.new.383539/NetworkManager-l2tp.changes
2026-09-17 15:17:45.518781636 +0200
@@ -1,0 +2,13 @@
+Wed Sep 16 13:37:59 UTC 2026 - Dominique Leuenberger <[email protected]>
+
+- Update to version 1.52.6:
+ + Security fixes for local privilege escalation to root
+ involving:
+ - Quote break-out via the 'user' string property written into
+ /run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75131)
+ - Partial strtol() on mtu/mru/mrru properties allow trailing
+ string injection written into /run/nm-l2tp-<uuid>/ppp-options
+ (CVE-2026-75883)
+* Updated translations.
+
+-------------------------------------------------------------------
Old:
----
NetworkManager-l2tp-1.52.4.tar.xz
New:
----
NetworkManager-l2tp-1.52.6.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ NetworkManager-l2tp.spec ++++++
--- /var/tmp/diff_new_pack.QC8fIB/_old 2026-09-17 15:17:47.135849400 +0200
+++ /var/tmp/diff_new_pack.QC8fIB/_new 2026-09-17 15:17:47.137849483 +0200
@@ -19,7 +19,7 @@
%define pppd_plugin_dir %(rpm -ql ppp | grep -m1 pppd/[0-9]*)
%define rbrelease %(r=%{release}; echo ${r%%.*})
Name: NetworkManager-l2tp
-Version: 1.52.4
+Version: 1.52.6
Release: 0
Summary: NetworkManager VPN support for L2TP and L2TP/IPsec
License: GPL-2.0-or-later
++++++ NetworkManager-l2tp-1.52.4.tar.xz -> NetworkManager-l2tp-1.52.6.tar.xz
++++++
++++ 38454 lines of diff (skipped)
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.QC8fIB/_old 2026-09-17 15:17:47.743874879 +0200
+++ /var/tmp/diff_new_pack.QC8fIB/_new 2026-09-17 15:17:47.755875382 +0200
@@ -1,6 +1,7 @@
-mtime: 1787209899
-commit: c7e8c4a856d7ce9a267c8a056a6e96c7a2ee851d8ea6d863e121b436f7341074
+mtime: 1789566055
+commit: 15bb7e759c7affa063aa87fc2d41d040e6f17d5b0dbec7e244bd7c587cee9c48
url: https://src.opensuse.org/GNOME/NetworkManager-l2tp
-revision: c7e8c4a856d7ce9a267c8a056a6e96c7a2ee851d8ea6d863e121b436f7341074
+revision: 15bb7e759c7affa063aa87fc2d41d040e6f17d5b0dbec7e244bd7c587cee9c48
+trackingbranch: factory
projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-09-16 15:40:55.000000000 +0200
@@ -0,0 +1,4 @@
+*.obscpio
+*.osc
+_build.*
+.pbuild
