diffoscope - Debian Package Tracker

general

source: diffoscope (main)
version: 326
maintainer: Reproducible builds folks (archive) (DMD)
uploaders: Chris Lamb [DMD] – Holger Levsen [DMD] – Mattia Rizzolo [DMD]
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 177
oldstable: 240+deb12u1
stable: 297+deb13u1
stable-bpo: 306~bpo13+1
testing: 325
unstable: 326

versioned links

177: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
240+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
297+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
306~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
325: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
326: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

diffoscope (29 bugs: 0, 12, 17, 0)
diffoscope-minimal (1 bugs: 0, 0, 1, 0)

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0:07:55
Last run: 2026-07-17T22:36:36.000Z
Previous status: unknown

testing: fail (log)
The tests ran in 0:01:57
Last run: 2026-07-28T10:24:17.000Z
Previous status: unknown

stable: pass (log)
The tests ran in 0:04:22
Last run: 2026-07-17T17:45:52.000Z
Previous status: unknown

Created: 2026-06-17 Last update: 2026-07-31 18:02

Marked for autoremoval on 11 August due to aflplusplus, apksigcopier: #1140940, #1141089 high

Version 325 of diffoscope is marked for autoremoval from testing on Tue 11 Aug 2026. It depends (transitively) on aflplusplus, apksigcopier, affected by #1140940, #1141089. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-06-28 Last update: 2026-07-31 17:32

lintian reports 1 error and 1 warning high

Lintian reports 1 error and 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2026-07-31 Last update: 2026-07-31 02:32

Depends on packages which need a new maintainer normal

The packages that diffoscope depends on which need a new maintainer are:

db-defaults (#1055344)
- Recommends: db-util db-util
- Build-Depends: db-util

Created: 2019-11-22 Last update: 2026-07-31 18:30

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2026-07-20 Last update: 2026-07-31 18:01

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 327, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 8781b8056fe092bc49be4a924e3d62aaef82691d
Author: Chris Lamb <lamby@debian.org>
Date:   Thu Jul 30 11:32:39 2026 -0700

    Open new changelog entry for version 327.
    
    Gbp-Dch: ignore

https://salsa.debian.org/api/v4/projects/reproducible-builds%2Fdiffoscope API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2019-05-22 Last update: 2026-07-30 22:19

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2024-25711: (needs triaging) diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

You can find information about how to handle this issue in the security team's documentation.

Created: 2024-02-10 Last update: 2026-07-31 00:01

testing migrations

excuses:
- Migration status for diffoscope (325 to 326): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Autopkgtest for bdebstrap/0.8.1-2: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, loong64: Test triggered, ppc64el: Pass, riscv64: Regression ♻ (reference ♻), s390x: Test triggered
- ∙ ∙ Autopkgtest for diffoscope/326: amd64: Failed (not a regression) ♻ (reference ♻), arm64: Failed (not a regression) ♻ (reference ♻), armhf: Failed (not a regression) ♻ (reference ♻), i386: Test triggered, loong64: Test triggered, ppc64el: Failed (not a regression) ♻ (reference ♻), riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for mmdebstrap/1.5.7-3: amd64: Failed (not a regression) ♻ (reference ♻), arm64: Failed (not a regression) ♻ (reference ♻), armhf: Failed (not a regression) ♻ (reference ♻), i386: Test triggered, loong64: Test triggered, ppc64el: Failed (not a regression) ♻ (reference ♻), riscv64: No tests, superficial or marked flaky ♻ (reference ♻), s390x: Test triggered (will not be considered a regression) ♻ (reference ♻)
- ∙ ∙ Autopkgtest for reprotest/0.7.32: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, loong64: Test triggered, ppc64el: Pass, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for rsync/3.4.4+ds1-1: amd64: Failed (not a regression) ♻ (reference ♻), arm64: Failed (not a regression) ♻ (reference ♻), armhf: Failed (not a regression) ♻ (reference ♻), i386: Test triggered, loong64: Test triggered, ppc64el: Failed (not a regression) ♻ (reference ♻), riscv64: Pass, s390x: Test triggered
- ∙ ∙ Autopkgtest for sbuild/0.91.10: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, loong64: Test triggered, ppc64el: Pass, riscv64: Pass, s390x: Test triggered
- ∙ ∙ Too young, only 0 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/d/diffoscope.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[rss feed]

[2026-07-30] Accepted diffoscope 326 (source) into unstable (Chris Lamb)
[2026-07-23] diffoscope 325 MIGRATED to testing (Debian testing watch)
[2026-07-17] Accepted diffoscope 325 (source) into unstable (Chris Lamb)
[2026-07-16] diffoscope 324 MIGRATED to testing (Debian testing watch)
[2026-07-10] Accepted diffoscope 324 (source) into unstable (Chris Lamb)
[2026-07-07] diffoscope 323 MIGRATED to testing (Debian testing watch)
[2026-06-30] Accepted diffoscope 323 (source) into unstable (Chris Lamb)
[2026-06-26] Accepted diffoscope 322 (source) into unstable (Chris Lamb)
[2026-06-25] diffoscope 321 MIGRATED to testing (Debian testing watch)
[2026-06-19] Accepted diffoscope 321 (source) into unstable (Chris Lamb)
[2026-06-19] Accepted diffoscope 320 (source) into unstable (Chris Lamb)
[2026-06-18] diffoscope 319 MIGRATED to testing (Debian testing watch)
[2026-06-12] Accepted diffoscope 319 (source) into unstable (Chris Lamb)
[2026-05-07] diffoscope 318 MIGRATED to testing (Debian testing watch)
[2026-05-01] Accepted diffoscope 318 (source) into unstable (Chris Lamb)
[2026-04-13] diffoscope 317 MIGRATED to testing (Debian testing watch)
[2026-04-10] Accepted diffoscope 317 (source) into unstable (Chris Lamb)
[2026-04-05] diffoscope 316 MIGRATED to testing (Debian testing watch)
[2026-04-02] Accepted diffoscope 316 (source) into unstable (Chris Lamb)
[2026-03-24] diffoscope 315 MIGRATED to testing (Debian testing watch)
[2026-03-20] Accepted diffoscope 315 (source) into unstable (Chris Lamb)
[2026-03-17] diffoscope 314 MIGRATED to testing (Debian testing watch)
[2026-03-13] Accepted diffoscope 314 (source) into unstable (Chris Lamb)
[2026-02-24] diffoscope 313 MIGRATED to testing (Debian testing watch)
[2026-02-20] Accepted diffoscope 313 (source) into unstable (Chris Lamb)
[2026-02-10] diffoscope 312 MIGRATED to testing (Debian testing watch)
[2026-02-06] Accepted diffoscope 312 (source) into unstable (Chris Lamb)
[2026-01-26] diffoscope 311 MIGRATED to testing (Debian testing watch)
[2026-01-23] Accepted diffoscope 311 (source) into unstable (Chris Lamb)
[2026-01-14] diffoscope 310 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 32 33
RC: 0
I&N: 12
M&W: 20 21
F&P: 0
patch: 0

links

homepage
lintian (1, 1)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 325