NetworkManager-l2tp-1.52.4-1.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

This package contains software for integrating L2TP and L2TP/IPsec
(L2TP over IPsec) VPN support with NetworkManager.

Provides

• NetworkManager-l2tp
• NetworkManager-l2tp(x86-64)
• libnm-vpn-plugin-l2tp.so()(64bit)

Requires

• /bin/sh
• /bin/sh
• NetworkManager >= 1.20.0
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libgio-2.0.so.0()(64bit)
• libglib-2.0.so.0()(64bit)
• libgobject-2.0.so.0()(64bit)
• libnm.so.0()(64bit)
• libnm.so.0(libnm_1_0_0)(64bit)
• libnm.so.0(libnm_1_2_0)(64bit)
• libnm.so.0(libnm_1_52_0)(64bit)
• libnm.so.0(libnm_1_56_0)(64bit)
• libnspr4.so()(64bit)
• libnss3.so()(64bit)
• libnss3.so(NSS_3.2)(64bit)
• libnss3.so(NSS_3.4)(64bit)
• libnss3.so(NSS_3.5)(64bit)
• libsmime3.so()(64bit)
• libsmime3.so(NSS_3.2)(64bit)
• ppp = 2.5.2
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rpmlib(RichDependencies) <= 4.12.0-1
• xl2tpd

License

GPL-2.0-or-later

Changelog

* Thu Aug 20 2026 Dominique Leuenberger <dimstar@opensuse.org>
  - Update to version 1.52.4:
    + Parser-hardening of control characters in username, VPN
      data-items and secrets along with PLUTODEBUG and CHARONDEBUG
      env vars.
    + Disable MPPE option in editor whenever IPsec is enabled.
    + Remove deprecated KDE Plasma-nm L2TP certificate support.
    + Updated translations.
  - Changes from version 1.52.2:
    + Add experimental IPv6 support. Requires kl2tpd or an
      IPv6-capable fork of xl2tpd.
    + Add optional Group Name / IPsec ID field for pre-shared key
      authentication.
    + Add xl2tpd-max-retries connection setting, while preserving the
      existing NM_L2TP_XL2TPD_MAX_RETRIES environment variable
      fallback.
    + Add ipcp-peer-ip connection setting so the IPCP peer address
      can be set without forcing ipv4.gateway, allowing it to be used
      with ipv4.never-default.
    + Fix import/export and editor save handling to preserve hidden
      VPN properties such as xl2tpd-max-retries and ipcp-peer-ip.
    + Fix several service and editor correctness issues, including
      portable daemon restart detection, auth-dialog timeout
      handling, memory leaks, a heap use-after-free and pointer
      ownership bugs.
    + Updated translations.
* Wed Jan 14 2026 Dominique Leuenberger <dimstar@opensuse.org>
  - Update to version 1.52.0:
    + Verify file permissions for private connections to prevent
      unprivileged user from using other user's certs (CVE-2025-9615).
    + Fixes CVE-2025-9615 in combination with NetworkManager 1.52.2,
      1.54.3 or 1.56.0 and later. See:
      https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2324
    + Fixes Warning g_dbus_method_invocation_take_error: assertion
      'error != NULL' failed for some strongswan failed IPsec
      connections.
    + Merge translations from NetworkManager-fortisslvpn,
      NetworkManager-libreswan and NetworkManager-openvpn
* Tue Dec 30 2025 Dominique Leuenberger <dimstar@opensuse.org>
  - Update to version 1.20.22:
    + Add group read permission to /etc/ipsec.d/ipsec.nm-l2tp.secrets.
      Required when Gentoo strongswan package is built with the
      "non-root" local USE flag, otherwise charon daemon does not
      have the privileges to read the ipsec.nm-l2tp.secrets file.
    + Stored PSK is no longer visible in auth-dialog.
    + Stored machine certificate passphrase is no longer visible in
      auth-dialog.
    + Check the presence of the L2TP editor plugin and provide
      feedback via the capabilities.
    + Wide character password fix.
    + Port auth-dialog Gtk4
    + Update and improve zh_TW Traditional Chinese locale.
* Tue Sep 23 2025 Bjørn Lie <bjorn.lie@gmail.com>
  - Update to version 1.20.20:
    + ipsec, xl2tpd & kl2tpd command-line debugging output added.
    + Fixes for gcc -Werror=format-securityerrors.
    + Silence gcc -Wmaybe-uninitialized warning.
    + No longer ignore libreswan failed to add connection errors,
      such as: global ikev1-policy does not allow IKEv1 connections
    + Fix for libreswan 5.x deprecation warnings when using libreswan
      5.x:
    - ikev2=no has been replaced by keyexchange=ikev1
    - keyingtries=0 ignored, UP connection will attempt to
      establish until marked DOWN
    + Merge translations from NetworkManager-openvpn and
      NetworkManager-pptp.
  - For changes between 1.20.10 and 1.20.20, please see the included
    NEWS file.
* Thu Jul 31 2025 Jonathan Kang <songchuan.kang@suse.com>
  - Stop emitting %{release} into program binaries(bsc#1246806).
* Thu Mar 28 2024 Jonathan Kang <songchuan.kang@suse.com>
  - Add missing supplements(bsc#1220391):
    + NMA subpackage: Main package and gnome-control-center
* Thu Nov 02 2023 Callum Farmer <gmbr3@opensuse.org>
  - Rename gnome subpackage to NetworkManager-applet-l2tp
    to more accurately reflect its usage
  - Add missing supplements:
    - NM and xl2tpd
    - NMA subpackage: Main package and NMA
  - Configure runstatedir to %_rundir
* Wed Oct 11 2023 Bjørn <bjorn.lie@gmail.com>
  - Update to version 1.20.10:
    + Fix missing ppp user option.
    + Add support for compiling against pppd-2.5.0, including
      pkgconfig support to pickup the pppd plugin directory.
    + Add error output for missing TLS filenames.
    + Remove bashisms in configure script.
    + Spell checked code with CSpell.
* Wed Jan 04 2023 Dirk Müller <dmueller@suse.com>
  - Update to version 1.20.8:
    + Fix padding of PPP Options dialog.
    + Undo PTP peer & ext GW routing prevention workaround first
      introduced with NetworkManager-l2tp 1.8.4 as workaround no
      longer works with NetworkManager 1.36. The actual fix should
      be done in NetworkManager.
    + Add support for Manual IPv4 configuration options: Address,
      Netmask and Gateway.
    + Remove deprecated OpenSSL 3 related code.
    + Load L2TP kernel modules if NM_L2TP_MODPROBE env variable set.
* Sun Nov 13 2022 doug@uq.edu.au
  - Update to version 1.20.6:
    + Fix for Libreswan 4.9 and later detection.
    + Fix for ipsec-psk-flags setting not being saved.
    + Add getenv NM_L2TP_XL2TPD_MAX_RETRIES to allow setting the
      xl2tpd max retries value.
    + Increase IPsec and L2TP daemon wait timeouts for potentially
      better debugging.
    + Updated translations.
  - Changes from version 1.20.4:
    + Security fix - properly detect that strongswan CHILD_SA
      connection has been established.
    + Fix for libreswan "cannot route template policy" error.

Files

/usr/lib/NetworkManager/VPN/nm-l2tp-service.name
/usr/lib64/NetworkManager/libnm-vpn-plugin-l2tp.so
/usr/lib64/pppd/2.5.2/nm-l2tp-pppd-plugin.so
/usr/libexec/nm-l2tp-service
/usr/share/dbus-1/system.d/nm-l2tp-service.conf
/usr/share/doc/packages/NetworkManager-l2tp
/usr/share/doc/packages/NetworkManager-l2tp/NEWS
/usr/share/doc/packages/NetworkManager-l2tp/README.md
/usr/share/licenses/NetworkManager-l2tp
/usr/share/licenses/NetworkManager-l2tp/COPYING

Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Aug 24 22:55:34 2026