nm-l2tp/NetworkManager-l2tp 1.20.26

version 1.20.26 release

on GitHub

Compatible with NetworkManager 1.20 and later.

Summary of changes since NetworkManager-l2tp 1.20.24:

• Security fixes for local privilege escalation to root involving:
  • Quote break-out via the 'user' string property written into /run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75131)
  • Partial strtol() on mtu/mru/mrru properties allow trailing string injection written into /run/nm-l2tp-<uuid>/ppp-options (CVE-2026-75883)
• Merged translations from NetworkManager-l2tp-1.52.6.