common: Exclude uncommon NetworkManager plugins

The protocols supported by those plugins are either obsolete or not
often used, and thus those plugins may include vulnerabilties.

Remove them for now and we can consider adding them back if requested.

See: https://blogs.gnome.org/mcatanzaro/2026/09/15/privilege-escalation-vulnerabilities-in-networkmanager-plugins/

common.yaml

@@ -174,6 +174,16 @@ exclude-packages:
   # See: https://gitlab.com/fedora/ostree/sig/-/issues/50
   - fuse
   - fuse-libs
+  # Exclude uncommon NetworkManager plugins
+  - NetworkManager-fortisslvpn
+  - NetworkManager-iodine
+  - NetworkManager-l2tp
+  - NetworkManager-libreswan
+  - NetworkManager-pptp
+  - NetworkManager-ssh
+  - NetworkManager-sstp-gnome
+  - NetworkManager-strongswan
+  - NetworkManager-vpnc
 
 postprocess:
   - |

comps-sync-exclude-list.yml

@@ -166,6 +166,7 @@ desktop_exclude_list:
     - traceroute
     # Remove uncommon NetworkManager plugins
     - NetworkManager-libreswan-gnome
+    - NetworkManager-ssh-gnome
   budgie-desktop:
     # Incompatible with ostree for various reasons
     - abrt-desktop
@@ -176,6 +177,7 @@ desktop_exclude_list:
     - NetworkManager-iodine-gnome
     - NetworkManager-l2tp-gnome
     - NetworkManager-libreswan-gnome
+    - NetworkManager-ssh-gnome
     - NetworkManager-sstp-gnome
     - NetworkManager-strongswan-gnome
     # Included explicitly in the fedora.yaml manifest
@@ -203,6 +205,7 @@ desktop_exclude_list:
     - plasma-nm-l2tp
     - plasma-nm-openswan
     - plasma-nm-pptp
+    - plasma-nm-vpnc
     # Already included in all Atomic Desktops by default
     - toolbox
     # Already included by default for all variants
@@ -221,6 +224,9 @@ desktop_exclude_list:
     - mpv
     # Explicitly added in common.yaml
     - git-core
+    # Remove uncommon NetworkManager plugins
+    - NetworkManager-l2tp-gnome
+    - NetworkManager-libreswan-gnome
   cosmic-desktop:
     # Included explicitly in the fedora.yaml manifest
     - toolbox

packages/budgie-atomic.yaml

@@ -5,7 +5,6 @@ packages:
   - NetworkManager-openconnect-gnome
   - NetworkManager-openvpn-gnome
   - NetworkManager-ppp
-  - NetworkManager-ssh-gnome
   - NetworkManager-wwan
   - ark
   - bluejay

packages/kinoite.yaml

@@ -66,7 +66,6 @@ packages:
   - plasma-nm
   - plasma-nm-openconnect
   - plasma-nm-openvpn
-  - plasma-nm-vpnc
   - plasma-pa
   - plasma-print-manager
   - plasma-setup

packages/silverblue.yaml

@@ -5,7 +5,6 @@ packages:
   - NetworkManager-openconnect-gnome
   - NetworkManager-openvpn-gnome
   - NetworkManager-ppp
-  - NetworkManager-ssh-gnome
   - NetworkManager-wwan
   - adobe-source-code-pro-fonts
   - avahi

packages/sway-atomic.yaml

@@ -1,7 +1,5 @@
 # DO NOT EDIT! This content is generated from comps-sync.py
 packages:
-  - NetworkManager-l2tp-gnome
-  - NetworkManager-libreswan-gnome
   - NetworkManager-openconnect-gnome
   - NetworkManager-openvpn-gnome
   - Thunar