17
0

6 Commits

Author SHA256 Message Date
33a779a710 Accepting request 1327204 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1327204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/NetworkManager-l2tp?expand=0&rev=19
2026-01-15 15:43:21 +00:00
cd37079452 - Update to version 1.52.0:
+ Verify file permissions for private connections to prevent
    unprivileged user from using other user's certs (CVE-2025-9615).
  + Fixes CVE-2025-9615 in combination with NetworkManager 1.52.2,
    1.54.3 or 1.56.0 and later. See:
    https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2324
  + Fixes Warning g_dbus_method_invocation_take_error: assertion
    'error != NULL' failed for some strongswan failed IPsec
    connections.
  + Merge translations from NetworkManager-fortisslvpn,
    NetworkManager-libreswan and NetworkManager-openvpn

- Update to version 1.20.22:
  + Add group read permission to /etc/ipsec.d/ipsec.nm-l2tp.secrets.
    Required when Gentoo strongswan package is built with the
    "non-root" local USE flag, otherwise charon daemon does not
    have the privileges to read the ipsec.nm-l2tp.secrets file.
  + Stored PSK is no longer visible in auth-dialog.
  + Stored machine certificate passphrase is no longer visible in
    auth-dialog.
  + Check the presence of the L2TP editor plugin and provide
    feedback via the capabilities.
  + Wide character password fix.
  + Port auth-dialog Gtk4
  + Update and improve zh_TW Traditional Chinese locale.

OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/NetworkManager-l2tp?expand=0&rev=45
2026-01-14 11:47:26 +00:00
4fe7fc595e Accepting request 1308803 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1308803
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/NetworkManager-l2tp?expand=0&rev=18
2025-10-04 16:50:32 +00:00
43bd9b6319 - Update to version 1.20.20:
+ ipsec, xl2tpd & kl2tpd command-line debugging output added.
  + Fixes for gcc -Werror=format-securityerrors.
  + Silence gcc -Wmaybe-uninitialized warning.
  + No longer ignore libreswan failed to add connection errors,
    such as: global ikev1-policy does not allow IKEv1 connections
  + Fix for libreswan 5.x deprecation warnings when using libreswan
    5.x:
    - ikev2=no has been replaced by keyexchange=ikev1
    - keyingtries=0 ignored, UP connection will attempt to
      establish until marked DOWN
  + Merge translations from NetworkManager-openvpn and
    NetworkManager-pptp.
- For changes between 1.20.10 and 1.20.20, please see the included
  NEWS file.

OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/NetworkManager-l2tp?expand=0&rev=43
2025-10-03 07:37:10 +00:00
64a642a034 Accepting request 1296762 from GNOME:Factory
- Stop emitting %{release} into program binaries(bsc#1246806). (forwarded request 1296728 from JonathanKang)

OBS-URL: https://build.opensuse.org/request/show/1296762
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/NetworkManager-l2tp?expand=0&rev=17
2025-08-01 20:40:01 +00:00
c8bab08124 - Stop emitting %{release} into program binaries(bsc#1246806).
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/NetworkManager-l2tp?expand=0&rev=41
2025-07-31 11:24:56 +00:00
4 changed files with 63 additions and 6 deletions

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ed45f02b0828ff4c597f4468ae8ee8e9e09f8a1a8ec8291c79d0e91d77cbdfdb
size 488244

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7a951d81dfbcbe4044fb88114f7a4e91d4e8f3d55bde148c743d3ee4700df3d9
size 513244

View File

@@ -1,3 +1,59 @@
-------------------------------------------------------------------
Wed Jan 14 10:12:53 UTC 2026 - Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 1.52.0:
+ Verify file permissions for private connections to prevent
unprivileged user from using other user's certs (CVE-2025-9615).
+ Fixes CVE-2025-9615 in combination with NetworkManager 1.52.2,
1.54.3 or 1.56.0 and later. See:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2324
+ Fixes Warning g_dbus_method_invocation_take_error: assertion
'error != NULL' failed for some strongswan failed IPsec
connections.
+ Merge translations from NetworkManager-fortisslvpn,
NetworkManager-libreswan and NetworkManager-openvpn
-------------------------------------------------------------------
Tue Dec 30 10:34:57 UTC 2025 - Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 1.20.22:
+ Add group read permission to /etc/ipsec.d/ipsec.nm-l2tp.secrets.
Required when Gentoo strongswan package is built with the
"non-root" local USE flag, otherwise charon daemon does not
have the privileges to read the ipsec.nm-l2tp.secrets file.
+ Stored PSK is no longer visible in auth-dialog.
+ Stored machine certificate passphrase is no longer visible in
auth-dialog.
+ Check the presence of the L2TP editor plugin and provide
feedback via the capabilities.
+ Wide character password fix.
+ Port auth-dialog Gtk4
+ Update and improve zh_TW Traditional Chinese locale.
-------------------------------------------------------------------
Tue Sep 23 08:06:42 UTC 2025 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 1.20.20:
+ ipsec, xl2tpd & kl2tpd command-line debugging output added.
+ Fixes for gcc -Werror=format-securityerrors.
+ Silence gcc -Wmaybe-uninitialized warning.
+ No longer ignore libreswan failed to add connection errors,
such as: global ikev1-policy does not allow IKEv1 connections
+ Fix for libreswan 5.x deprecation warnings when using libreswan
5.x:
- ikev2=no has been replaced by keyexchange=ikev1
- keyingtries=0 ignored, UP connection will attempt to
establish until marked DOWN
+ Merge translations from NetworkManager-openvpn and
NetworkManager-pptp.
- For changes between 1.20.10 and 1.20.20, please see the included
NEWS file.
-------------------------------------------------------------------
Thu Jul 31 08:52:38 UTC 2025 - Jonathan Kang <songchuan.kang@suse.com>
- Stop emitting %{release} into program binaries(bsc#1246806).
-------------------------------------------------------------------
Thu Mar 28 07:55:28 UTC 2024 - Jonathan Kang <songchuan.kang@suse.com>

View File

@@ -1,7 +1,7 @@
#
# spec file for package NetworkManager-l2tp
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2026 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,8 +17,9 @@
%define pppd_plugin_dir %(rpm -ql ppp | grep -m1 pppd/[0-9]*)
%define rbrelease %(r=%{release}; echo ${r%%.*})
Name: NetworkManager-l2tp
Version: 1.20.10
Version: 1.52.0
Release: 0
Summary: NetworkManager VPN support for L2TP and L2TP/IPsec
License: GPL-2.0-or-later
@@ -73,7 +74,7 @@ This package contains software for integrating L2TP and L2TP/IPsec
--enable-lto=yes \
--enable-libreswan-dh2 \
--with-pppd-plugin-dir=%{pppd_plugin_dir} \
--with-dist-version=%{version}-%{release} \
--with-dist-version=%{version}-%{rbrelease} \
runstatedir=%{_rundir} \
%{nil}
%make_build