From foo@bar Thu Nov 5 22:30:04 2026 Format: 1.8 Date: Thu, 05 Nov 2026 17:00:33 +0000 Source: ppp Binary: ppp ppp-dbgsym ppp-udeb Architecture: ppc64 Version: 2.5.5-1+1~exp1 Distribution: experimental Urgency: medium Maintainer: ppc64 / powerpc Build Daemon (debian-project-be-1) Changed-By: Chris Boot Description: ppp - Point-to-Point Protocol (PPP) - daemon ppp-udeb - Point-to-Point Protocol (PPP) - package for Debian Installer (udeb) Closes: 511013 1135816 1138827 1148816 1148821 Changes: ppp (2.5.5-1+1~exp1) experimental; urgency=medium . * New upstream release. (Closes: #1138827) - Fixes several security issues, including CVE-2026-75883 and CVE-2026-85495. See the advisories at https://github.com/ppp-project/ppp/security/advisories for details. (Closes: #1148816, #1148821) - Fixes the link sometimes coming up without MPPE encryption despite require-mppe, require-mppe-40 or require-mppe-128. - Fixes validation of received frames in the RADIUS plugin. - Fixes hook scripts such as /etc/ppp/ip-up sometimes not being run. - pppd now refuses to use secrets files that are readable by group or other, and scripts, privileged options files and secrets files whose path is not owned by root or is writable by non-root users. This replaces the duplicated warning about readable secrets files. (Closes: #511013) - The defaultroute option now always adds a default route, even if one already exists. replacedefaultroute is no longer supported. - EAP-TLS: OpenSSL engine support is disabled, and MPPE key generation with TLS 1.3 now matches Windows (incompatible with older pppd). - EAP-SRP support has been removed. - New dhcpv6relay plugin and vrf option. * Drop chat_man: upstream now documents the TIMEOUT directive in chat(8). * Drop pppoatm_resolver_light: upstream has removed the ATM name service lookup and SVC address parsing from the pppoatm plugin, and the QoS parsing that remains is small and makes the qos option usable again. * Drop pppd.8-fix-groff-warning.patch and the pppdump GCC 15 build fix backport, both included in this upstream release. * Refresh zzz_config and pppd-soname-hack.patch. * Update symbols for the new upstream release. * Check symbols with dpkg-gensymbols -c4, so that a changed pppd SONAME fails the build instead of silently skipping the symbols comparison. * New patch pppd.8-fix-typos-and-groff-warning.patch: fix two typos and a duplicated .TP macro in pppd(8). * Add DEP-3 headers to pppoe_noads and resolv.conf_no_log. * Update lintian overrides for the new /etc/ppp/peers and /etc/chatscripts permissions and pppd no longer being setuid, and drop unused overrides. * Remove redundant Priority: optional field from debian/control. * Stop installing /usr/sbin/pppd setgid. Practically all users start pppd via some kind of networking or service supervisor, and this is an unnecessary security risk in modern times. * Change the permissions on /etc/ppp/peers to 0700, and also use dpkg-statoverride to set the permissions to root:root 0700. (Closes: #1135816) * Also change the permissions on /etc/chatscripts to root:root. * Update README.Debian and add a NEWS entry describing the above. * Clarify the error message when pon is run as an unprivileged user. * Remove Rules-Requires-Root: binary-targets. * Remove unused shlibs:Depends from Depends in ppp-dev. * Import upstream from signed git tags instead of release tarballs. * Ignore .github/ in debian/source/options: upstream's .gitattributes excludes it from orig tarballs generated with git archive. * Update standards version to 4.7.4, no changes needed. * Convert debian/copyright to the machine-readable DEP-5 format. * Add an autopkgtest running upstream's integration testsuite against the installed pppd. * Upload to experimental. Checksums-Sha1: f07f1aac5c671f1d5a70ed529d27666d57b6112c 607636 ppp-dbgsym_2.5.5-1+1~exp1_ppc64.deb c50bd355fe782358700c9bfe11b49bfccb6a805d 133640 ppp-udeb_2.5.5-1+1~exp1_ppc64.udeb 1c5aeea20329cb06fc33f00bd1661044eb0b4178 6312 ppp_2.5.5-1+1~exp1_ppc64.buildinfo c19a0502eeffa4251f13e1e16247786ce5d99e88 377932 ppp_2.5.5-1+1~exp1_ppc64.deb Checksums-Sha256: b3e94a20218936463cf4bf720b30aab67216553f996187ab71dedfcc723af578 607636 ppp-dbgsym_2.5.5-1+1~exp1_ppc64.deb 5cb57133f550e7bae9aaf8ec20b5d80288dd1a3b455a2aae32d1f9b9c9330fd0 133640 ppp-udeb_2.5.5-1+1~exp1_ppc64.udeb ed7439b941ace148230d4a1a1e4fee8ce17fe14b223f8077dcf5573f478bbcb8 6312 ppp_2.5.5-1+1~exp1_ppc64.buildinfo 72eb01ac50d6b781b9c737ab5d5cc82f30e28fac44ac39e8de01c9b2eddcdd23 377932 ppp_2.5.5-1+1~exp1_ppc64.deb Files: a414a364acb963f9bbebddbc1c9a429e 607636 debug optional ppp-dbgsym_2.5.5-1+1~exp1_ppc64.deb 922080f3f93dcf90a314d13ab03ebd65 133640 debian-installer optional ppp-udeb_2.5.5-1+1~exp1_ppc64.udeb 6535999e72aa846c249eb4447aa493dd 6312 admin optional ppp_2.5.5-1+1~exp1_ppc64.buildinfo 02f961379d967a9a62ae8290f487741b 377932 admin optional ppp_2.5.5-1+1~exp1_ppc64.deb Signed-By: Debian buildd autosigning key for debian-project-be-1