Accepted ppp 2.5.5-1+1~exp1 (source) into experimental

Debian FTP Masters Thu, 05 Nov 2026 13:49:39 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 05 Nov 2026 17:00:33 +0000
Source: ppp
Architecture: source
Version: 2.5.5-1+1~exp1
Distribution: experimental
Urgency: medium
Maintainer: Chris Boot <[email protected]>
Changed-By: Chris Boot <[email protected]>
Closes: 511013 1135816 1138827 1148816 1148821
Changes:
 ppp (2.5.5-1+1~exp1) experimental; urgency=medium
 .
   * New upstream release. (Closes: #1138827)
     - Fixes several security issues, including CVE-2026-75883 and
       CVE-2026-85495. See the advisories at
       https://github.com/ppp-project/ppp/security/advisories for details.
       (Closes: #1148816, #1148821)
     - Fixes the link sometimes coming up without MPPE encryption despite
       require-mppe, require-mppe-40 or require-mppe-128.
     - Fixes validation of received frames in the RADIUS plugin.
     - Fixes hook scripts such as /etc/ppp/ip-up sometimes not being run.
     - pppd now refuses to use secrets files that are readable by group or
       other, and scripts, privileged options files and secrets files whose
       path is not owned by root or is writable by non-root users. This
       replaces the duplicated warning about readable secrets files.
       (Closes: #511013)
     - The defaultroute option now always adds a default route, even if one
       already exists. replacedefaultroute is no longer supported.
     - EAP-TLS: OpenSSL engine support is disabled, and MPPE key generation
       with TLS 1.3 now matches Windows (incompatible with older pppd).
     - EAP-SRP support has been removed.
     - New dhcpv6relay plugin and vrf option.
   * Drop chat_man: upstream now documents the TIMEOUT directive in chat(8).
   * Drop pppoatm_resolver_light: upstream has removed the ATM name service
     lookup and SVC address parsing from the pppoatm plugin, and the QoS
     parsing that remains is small and makes the qos option usable again.
   * Drop pppd.8-fix-groff-warning.patch and the pppdump GCC 15 build fix
     backport, both included in this upstream release.
   * Refresh zzz_config and pppd-soname-hack.patch.
   * Update symbols for the new upstream release.
   * Check symbols with dpkg-gensymbols -c4, so that a changed pppd SONAME
     fails the build instead of silently skipping the symbols comparison.
   * New patch pppd.8-fix-typos-and-groff-warning.patch: fix two typos and a
     duplicated .TP macro in pppd(8).
   * Add DEP-3 headers to pppoe_noads and resolv.conf_no_log.
   * Update lintian overrides for the new /etc/ppp/peers and /etc/chatscripts
     permissions and pppd no longer being setuid, and drop unused overrides.
   * Remove redundant Priority: optional field from debian/control.
   * Stop installing /usr/sbin/pppd setgid. Practically all users start pppd
     via some kind of networking or service supervisor, and this is an
     unnecessary security risk in modern times.
   * Change the permissions on /etc/ppp/peers to 0700, and also use
     dpkg-statoverride to set the permissions to root:root 0700.
     (Closes: #1135816)
   * Also change the permissions on /etc/chatscripts to root:root.
   * Update README.Debian and add a NEWS entry describing the above.
   * Clarify the error message when pon is run as an unprivileged user.
   * Remove Rules-Requires-Root: binary-targets.
   * Remove unused shlibs:Depends from Depends in ppp-dev.
   * Import upstream from signed git tags instead of release tarballs.
   * Ignore .github/ in debian/source/options: upstream's .gitattributes
     excludes it from orig tarballs generated with git archive.
   * Update standards version to 4.7.4, no changes needed.
   * Convert debian/copyright to the machine-readable DEP-5 format.
   * Add an autopkgtest running upstream's integration testsuite against the
     installed pppd.
   * Upload to experimental.
Checksums-Sha1:
 5bb4374400601a6b51f55acb9dc687e266cec78e 2386 ppp_2.5.5-1+1~exp1.dsc
 91c4818a29907235c9632d5f041bd0da21d138b2 417372 ppp_2.5.5.orig.tar.xz
 d52c30dbf4a11a11206478b0d41c0d032a84f726 90788 ppp_2.5.5-1+1~exp1.debian.tar.xz
 bad440603840eeeee9b33a9048c3b34534fa6d97 1764232 ppp_2.5.5-1+1~exp1.git.tar.xz
 00cc1a946329e80227ae3ed79c0795d8e9f56486 17749 
ppp_2.5.5-1+1~exp1_source.buildinfo
Checksums-Sha256:
 9b972618e6d07cc022c3281526a6e9d0e46b65bacd81bb40e0722e4c18d14c89 2386 
ppp_2.5.5-1+1~exp1.dsc
 584068704e5ca7360e5f3cfb6550128c68242aae055a54f59e5e4c1d55f4a638 417372 
ppp_2.5.5.orig.tar.xz
 097c4af97c2e1505c824a5016a82b35db8a1754599e904bad3327719add142bd 90788 
ppp_2.5.5-1+1~exp1.debian.tar.xz
 5bce0654202ba03cc654847056333e5048cb17ed6554652d16f20afd55fffbb6 1764232 
ppp_2.5.5-1+1~exp1.git.tar.xz
 80fe1c8920c16031f5357e6ef2391d57dbc8a020e90a1d785ada005105645d97 17749 
ppp_2.5.5-1+1~exp1_source.buildinfo
Files:
 dcb541bd21bc3c350a9208057f14d4d7 2386 admin optional ppp_2.5.5-1+1~exp1.dsc
 1ad1c1968e5ab0189270f5322d56d9cb 417372 admin optional ppp_2.5.5.orig.tar.xz
 fd938ea5de285104a8c851631d2f977b 90788 admin optional 
ppp_2.5.5-1+1~exp1.debian.tar.xz
 850c059d028f246d6430a9216b270ebd 1764232 admin None 
ppp_2.5.5-1+1~exp1.git.tar.xz
 c7b85151a8647ba96cc2f4f1132bba16 17749 admin optional 
ppp_2.5.5-1+1~exp1_source.buildinfo
Git-Tag-Info: tag=57ed05c3ebf93320cbb66265c01355daee7a7b13 
fp=da8a90f57ffb1d647e4034da411a733e67d64ffe
Git-Tag-Tagger: Chris Boot <[email protected]>
pgpvonS6Q1oUg.pgp
Description: PGP signature
Accepted ppp 2.5.5-1+1~exp1 (source) into experimental

Reply via email to
