Ok, this is embarrasing: after discussing that Debian version regex and the version scheme for proposed-updates, I failed to see that the regex was wrong (see https://bugs.debian.org/935938). Its fixed now in 25.0.0+11+deb10u1. And hopefully I got the version right. Is this bug report enough, or should I open a new one?