Package: release.debian.org Severity: normal X-Debbugs-Cc: [email protected] Control: affects -1 + src:ppp User: [email protected] Usertags: transition
Hello Release Team friends, I have uploaded ppp 2.5.5-1+1~exp1 to experimental, and it has built on all release architectures except riscv64, where it is still waiting for a buildd. As usual, every upstream release needs a transition because other packages build plugins for pppd and the plugin ABI is not stable. This one jumps from 2.5.2 to 2.5.5, so it includes the security fixes from 2.5.4 (CVE-2026-75883, CVE-2026-85495), which I'd like to get into unstable reasonably soon. This time I test-rebuilt all seven reverse build-dependencies of ppp-dev on debusine.debian.net (amd64), against the 2.5.5 binaries, before filing this. They all built without any source changes, and each plugin package picked up the new ABI from dh_ppp: connman connman-vpn Breaks ppp (<< 2.5.5-1+~) network-manager network-manager Breaks ppp (<< 2.5.5-1+~) network-manager-l2tp network-manager-l2tp Depends ppp (>= 2.5.5-1+~) network-manager-pptp network-manager-pptp Depends ppp (>= 2.5.5-1+~) network-manager-sstp network-manager-sstp Depends ppp (>= 2.5.5-1+~) pptpd pptpd Depends ppp (>= 2.5.5-1+~) sstp-client sstp-client Depends ppp (>= 2.5.5-1+~) The work requests are #1590623 to #1590629 in the debian/developers workspace, e.g. https://debusine.debian.net/debian/developers/work-request/1590623/ So I expect binNMUs to be all that is needed. Once you give the go-ahead I'll upload 2.5.5-1+1 to unstable. Thanks, Chris Ben file: title = "ppp"; is_affected = .build-depends ~ /ppp-dev/; is_good = .depends ~ /ppp \(>= 2\.5\.5-1\+~\)/ | .breaks ~ /ppp \(<< 2\.5\.5-1\+~\)/; is_bad = .depends ~ /ppp \(>= 2\.5\.2-1\+~\)/ | .breaks ~ /ppp \(<< 2\.5\.2-1\+~\)/;

