Hello Release Team friends,

I have uploaded ppp 2.5.5-1+1~exp1 to experimental, and it has built on
all release architectures except riscv64, where it is still waiting for a
buildd. As usual, every upstream release needs a transition because other
packages build plugins for pppd and the plugin ABI is not stable.

This one jumps from 2.5.2 to 2.5.5, so it includes the security fixes from
2.5.4 (CVE-2026-75883, CVE-2026-85495), which I'd like to get into
unstable reasonably soon.

This time I test-rebuilt all seven reverse build-dependencies of ppp-dev
on debusine.debian.net (amd64), against the 2.5.5 binaries, before filing
this. They all built without any source changes, and each plugin package
picked up the new ABI from dh_ppp:

  connman               connman-vpn            Breaks  ppp (<< 2.5.5-1+~)
  network-manager       network-manager        Breaks  ppp (<< 2.5.5-1+~)
  network-manager-l2tp  network-manager-l2tp   Depends ppp (>= 2.5.5-1+~)
  network-manager-pptp  network-manager-pptp   Depends ppp (>= 2.5.5-1+~)
  network-manager-sstp  network-manager-sstp   Depends ppp (>= 2.5.5-1+~)
  pptpd                 pptpd                  Depends ppp (>= 2.5.5-1+~)
  sstp-client           sstp-client            Depends ppp (>= 2.5.5-1+~)

The work requests are #1590623 to #1590629 in the debian/developers
workspace, e.g.
https://debusine.debian.net/debian/developers/work-request/1590623/

So I expect binNMUs to be all that is needed. Once you give the go-ahead
I'll upload 2.5.5-1+1 to unstable.

Thanks,
Chris

Ben file:

title = "ppp";
is_affected = .build-depends ~ /ppp-dev/;
is_good = .depends ~ /ppp \(>= 2\.5\.5-1\+~\)/ | .breaks ~ /ppp \(<< 2\.5\.5-1\+~\)/;
is_bad = .depends ~ /ppp \(>= 2\.5\.2-1\+~\)/ | .breaks ~ /ppp \(<< 2\.5\.2-1\+~\)/;