[Pkg-utopia-maintainers] Bug#809494: network-manager: NetworkManager 1.0.10-1 does not add default route for VPN

[Marcel Lippmann]

Package: network-manager
Version: 1.0.10-1
Severity: important

Dear Maintainer,

I am using NetworkManager and the OpenVPN plugin (network-manager-openvpn).
After upgrading NetworkManager 1.0.8-1 to 1.0.10-1, no default routes were set
anymore.

The corresponding lines in /var/log/syslog are:

Dec 31 11:11:00 snowfox NetworkManager[2599]: <warn>  platform-linux: do-add-ip4-route: failure adding ip4-route '10: 0.0.0.0/0 50': Unspecific failure (1)
Dec 31 11:11:00 snowfox NetworkManager[2599]: <warn>  default-route: failed to add default route 0.0.0.0/0 via 10.8.0.5 dev 10 metric 50 mss 0 src vpn with effective metric 50

I choose severity ‘important’, because this renders a VPN tunnel useless in many
cases, and this is a major security leak.  Please feel free to change the
severity level if you disagree.

Best wishes,

Marcel


-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages network-manager depends on:
ii  adduser                3.113+nmu3
ii  dbus                   1.10.6-1
ii  init-system-helpers    1.24
ii  isc-dhcp-client        4.3.3-5
ii  libbluetooth3          5.36-1
ii  libc6                  2.21-6
ii  libdbus-1-3            1.10.6-1
ii  libdbus-glib-1-2       0.102-1
ii  libglib2.0-0           2.46.2-3
ii  libgnutls-deb0-28      3.3.18-1
ii  libgudev-1.0-0         230-2
ii  libmm-glib0            1.4.12-1
ii  libndp0                1.4-2
ii  libnewt0.52            0.52.18-1+b1
ii  libnl-3-200            3.2.26-1
ii  libnl-genl-3-200       3.2.26-1
ii  libnl-route-3-200      3.2.26-1
ii  libnm0                 1.0.10-1
ii  libpam-systemd         228-2+b1
ii  libpolkit-agent-1-0    0.105-14
ii  libpolkit-gobject-1-0  0.105-14
ii  libreadline6           6.3-8+b4
ii  libsoup2.4-1           2.52.1-1
ii  libsystemd0            228-2+b1
ii  libteamdctl0           1.18-1
ii  libuuid1               2.27.1-1
ii  lsb-base               9.20150917
ii  policykit-1            0.105-14
ii  udev                   228-2+b1
ii  wpasupplicant          2.3-2.3

Versions of packages network-manager recommends:
ii  crda            3.13-1+b1
ii  dnsmasq-base    2.75-1
ii  iptables        1.4.21-2+b1
ii  iputils-arping  3:20121221-5+b2
ii  modemmanager    1.4.12-1
ii  ppp             2.4.7-1+1

Versions of packages network-manager suggests:
pn  avahi-autoipd  <none>
pn  libteam-utils  <none>

-- debconf-show failed