Back Linuxsecurity

Fedora 42: NetworkManager-l2tp Important File Permissions Fix CVE-2025

Linuxsecurity •LinuxSecurity Advisories • January 13, 2026

This package contains software for integrating L2TP and L2TP over IPsec VPN support with the NetworkManager. Update Information : Updated to 1.52.0 release (CVE-2025-9615) Verify file permissions for private connections to prevent unprivileged user from using other user's certs. Ensure NetworkManager dependency has CVE-2025-9615 update.

This package contains software for integrating L2TP and L2TP over

IPsec VPN support with the NetworkManager.

Updated to 1.52.0 release (CVE-2025-9615) Verify file permissions for private connections to prevent unprivileged user from using other user's certs. Ensure NetworkManager dependency has CVE-2025-9615 update.

* Sun Jan 11 2026 Douglas Kosovic - 1.52.0-1 - Updated to 1.52.0 release Verify file permissions for private connections to prevent unprivileged user from using other user's certs (CVE-2025-9615) - Ensure NetworkManager dependency has CVE-2025-9615 update. - Correct sed example in generated README.Fedora and README.EPEL files. * Wed Nov 12 2025 Douglas Kosovic - 1.20.20-5 - Add README.Fedora for Fedora or README.EPEL for EPEL - Use (go-l2tp or xl2tpd) dependency for Fedora 43 to handle upgrades from earlier Fedora versions that had xl2tpd installed. * Tue Aug 26 2025 Douglas Kosovic - 1.20.20-4 - Fix orphaned xl2tpd dependency issue, switch to go-l2tp (rhbz#2390669,rhbz#2390688) * Wed Jul 23 2025 Fedora Release Engineering - 1.20.20-3 - Rebuilt for

Fedora Update Notification FEDORA-2026-0d1cf2e45b 2026-01-13 01:12:50.637164+00:00 Name : NetworkManager-l2tp Product : Fedora 42 Version : 1.52.0 Release : 1.fc42 URL : Summary : NetworkManager VPN plugin for L2TP and L2TP/IPsec Description : This package contains software for integrating L2TP and L2TP over IPsec VPN support with the NetworkManager.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-0d1cf2e45b' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora NetworkManager-l2tp Vulnerability Fix CVE-2025-9615 Fedora has released updates for NetworkManager-l2tp to address a critical vulnerability (CVE-2025-9615) related to file permissions. This issue allows unprivileged users to access other users' certificates, affecting users of L2TP and L2TP over IPsec VPN support. The update ensures that proper file permissions are enforced to mitigate this risk. 2 sources 18

Extracted Entities

Companies (1)

Fedora

CVEs (1)

CVE-2025-9615