diffoscope - Debian Package Tracker

general

source: diffoscope (main)
version: 324
maintainer: Reproducible builds folks (archive) (DMD)
uploaders: Chris Lamb [DMD] – Holger Levsen [DMD] – Mattia Rizzolo [DMD]
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 177
oldstable: 240+deb12u1
stable: 297+deb13u1
stable-bpo: 306~bpo13+1
testing: 323
unstable: 324

versioned links

177: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
240+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
297+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
306~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
323: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
324: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

diffoscope (29 bugs: 0, 12, 17, 0)
diffoscope-minimal (1 bugs: 0, 0, 1, 0)

action needed

Marked for autoremoval on 11 August due to aflplusplus, apksigcopier, httpx: #1140940, #1140980, #1141089 high

Version 323 of diffoscope is marked for autoremoval from testing on Tue 11 Aug 2026. It depends (transitively) on aflplusplus, apksigcopier, httpx, affected by #1140940, #1140980, #1141089. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-06-28 Last update: 2026-07-15 10:30

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0:07:22
Last run: 2026-07-10T23:53:33.000Z
Previous status: unknown

testing: fail (log)
The tests ran in 0:01:59
Last run: 2026-06-25T03:37:06.000Z
Previous status: unknown

stable: pass (log)
The tests ran in 0:04:41
Last run: 2025-11-09T12:05:38.000Z
Previous status: unknown

Created: 2026-06-17 Last update: 2026-07-15 10:01

lintian reports 1 error and 1 warning high

Lintian reports 1 error and 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2026-07-01 Last update: 2026-07-01 07:31

Depends on packages which need a new maintainer normal

The packages that diffoscope depends on which need a new maintainer are:

db-defaults (#1055344)
- Recommends: db-util db-util
- Build-Depends: db-util

Created: 2019-11-22 Last update: 2026-07-15 09:18

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2026-07-06 Last update: 2026-07-15 07:00

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 325, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 1e32d8957aebc67addb6dd03ab03feeabbd4e188
Author: Chris Lamb <lamby@debian.org>
Date:   Mon Jul 13 10:06:39 2026 -0700

    Fix tests to work with zipdetails 4.0008. (Closes: Debian:#1141359)

commit 0f8b3334979dc79905b8e943366c11caf1ce7325
Author: Chris Lamb <lamby@debian.org>
Date:   Fri Jul 10 08:35:58 2026 -0700

    Open new changelog entry for version 325.
    
    Gbp-Dch: ignore

Created: 2019-05-22 Last update: 2026-07-13 19:31

9 open merge requests in Salsa normal

There are 9 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2025-08-19 Last update: 2026-07-06 17:32

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2024-25711: (needs triaging) diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

You can find information about how to handle this issue in the security team's documentation.

Created: 2024-02-10 Last update: 2026-07-10 21:30

testing migrations

excuses:
- Migration status for diffoscope (323 to 324): Waiting for test results or another package, or too young (no action required now - check later)
- Issues preventing migration:
- ∙ ∙ Too young, only 4 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/d/diffoscope.html
- ∙ ∙ Autopkgtest for diffoscope/324: amd64: Pass, arm64: Pass, armhf: Failed (not a regression) ♻ (reference ♻), i386: Failed (not a regression) ♻ (reference ♻), loong64: Failed (not a regression) ♻ (reference ♻), ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[rss feed]

[2026-07-10] Accepted diffoscope 324 (source) into unstable (Chris Lamb)
[2026-07-07] diffoscope 323 MIGRATED to testing (Debian testing watch)
[2026-06-30] Accepted diffoscope 323 (source) into unstable (Chris Lamb)
[2026-06-26] Accepted diffoscope 322 (source) into unstable (Chris Lamb)
[2026-06-25] diffoscope 321 MIGRATED to testing (Debian testing watch)
[2026-06-19] Accepted diffoscope 321 (source) into unstable (Chris Lamb)
[2026-06-19] Accepted diffoscope 320 (source) into unstable (Chris Lamb)
[2026-06-18] diffoscope 319 MIGRATED to testing (Debian testing watch)
[2026-06-12] Accepted diffoscope 319 (source) into unstable (Chris Lamb)
[2026-05-07] diffoscope 318 MIGRATED to testing (Debian testing watch)
[2026-05-01] Accepted diffoscope 318 (source) into unstable (Chris Lamb)
[2026-04-13] diffoscope 317 MIGRATED to testing (Debian testing watch)
[2026-04-10] Accepted diffoscope 317 (source) into unstable (Chris Lamb)
[2026-04-05] diffoscope 316 MIGRATED to testing (Debian testing watch)
[2026-04-02] Accepted diffoscope 316 (source) into unstable (Chris Lamb)
[2026-03-24] diffoscope 315 MIGRATED to testing (Debian testing watch)
[2026-03-20] Accepted diffoscope 315 (source) into unstable (Chris Lamb)
[2026-03-17] diffoscope 314 MIGRATED to testing (Debian testing watch)
[2026-03-13] Accepted diffoscope 314 (source) into unstable (Chris Lamb)
[2026-02-24] diffoscope 313 MIGRATED to testing (Debian testing watch)
[2026-02-20] Accepted diffoscope 313 (source) into unstable (Chris Lamb)
[2026-02-10] diffoscope 312 MIGRATED to testing (Debian testing watch)
[2026-02-06] Accepted diffoscope 312 (source) into unstable (Chris Lamb)
[2026-01-26] diffoscope 311 MIGRATED to testing (Debian testing watch)
[2026-01-23] Accepted diffoscope 311 (source) into unstable (Chris Lamb)
[2026-01-14] diffoscope 310 MIGRATED to testing (Debian testing watch)
[2026-01-09] Accepted diffoscope 310 (source) into unstable (Chris Lamb)
[2025-12-20] Accepted diffoscope 297+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Chris Lamb)
[2025-11-18] diffoscope 309 MIGRATED to testing (Debian testing watch)
[2025-11-14] Accepted diffoscope 309 (source) into unstable (Chris Lamb)

bugs [bug history graph]

all: 33 34
RC: 0
I&N: 13
M&W: 20 21
F&P: 0
patch: 0

links

homepage
lintian (1, 1)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 324