Debian Package Tracker
Register | Log in
Subscribe

diffoscope

in-depth visual diff tool for files, archives and directories

Choose email to subscribe with

general
  • source: diffoscope (main)
  • version: 305
  • maintainer: Reproducible builds folks (archive) (DMD)
  • uploaders: Chris Lamb [DMD] – Holger Levsen [DMD] – Mattia Rizzolo [DMD]
  • arch: all
  • std-ver: 4.7.2
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 177
  • oldstable: 240+deb12u1
  • stable: 297
  • testing: 305
  • unstable: 305
versioned links
  • 177: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 240+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 297: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 305: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • diffoscope (28 bugs: 0, 12, 16, 0)
  • diffoscope-minimal
action needed
Marked for autoremoval on 07 October due to goffice, guestfs-tools: #1111952, #1112101 high
Version 305 of diffoscope is marked for autoremoval from testing on Tue 07 Oct 2025. It depends (transitively) on goffice, guestfs-tools, affected by #1111952, #1112101. You should try to prevent the removal by fixing these RC bugs.
Created: 2025-08-31 Last update: 2025-09-03 13:33
Depends on packages which need a new maintainer normal
The packages that diffoscope depends on which need a new maintainer are:
  • tlsh (#1087262)
    • Recommends: python3-tlsh python3-tlsh
    • Build-Depends: python3-tlsh
  • db-defaults (#1055344)
    • Recommends: db-util db-util
    • Build-Depends: db-util
Created: 2019-11-22 Last update: 2025-09-03 13:33
14 open merge requests in Salsa normal
There are 14 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.
Created: 2025-08-19 Last update: 2025-09-02 22:37
version in VCS is newer than in repository, is it time to upload? normal
vcswatch reports that this package seems to have a new changelog entry (version 306, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:
commit 8f2651674e4d27d3fc287070af9c86ac1dd0b7c3
Author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Date:   Mon Aug 25 11:17:48 2025 +0200

    test_dtb: accept additional 'v' in fdtump --version
    
    CI fails with:
    tests/comparators/test_dtb.py:45: in fdtdump_version
        raise ValueError("Error parsing `fdtdump --version` output")
    E   ValueError: Error parsing `fdtdump --version` output
            m          = None
            out        = ('\n'
     '**** fdtdump is a low-level debugging tool, not meant for general use.\n'
     '**** If you want to decompile a dtb, you probably want\n'
     '****     dtc -I dtb -O dts <filename>\n'
     '\n'
     'Version: DTC v1.7.2-1-g9af601c\n')
    
    Maybe Arch overrides the version or something. Let's just skip the 'v'
    if it is there.

commit 112492eca8ac35236c967c7a4735cde1031ec145
Author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Date:   Sun Aug 3 18:32:26 2025 +0200

    Replace open instead of codecs.open in simple cases
    
    python 3.14 doesn't like codecs.open:
    
    tests/test_readers.py: 1 warning
    tests/comparators/test_gettext.py::test_charsets
      /builddir/build/BUILD/diffoscope-303-build/diffoscope-303/tests/comparators/test_gettext.py:61: DeprecationWarning: codecs.open() is deprecated. Use open() instead.
        expected_diff = codecs.open(
    tests/comparators/test_text.py::test_difference_in_unicode
      /builddir/build/BUILD/diffoscope-303-build/diffoscope-303/tests/comparators/test_text.py:53: DeprecationWarning: codecs.open() is deprecated. Use open() instead.
        expected_diff = codecs.open(
    tests/comparators/test_text.py::test_difference_between_iso88591_and_unicode
      /builddir/build/BUILD/diffoscope-303-build/diffoscope-303/tests/comparators/test_text.py:64: DeprecationWarning: codecs.open() is deprecated. Use open() instead.
        expected_diff = codecs.open(
    tests/comparators/test_text.py::test_difference_between_iso88591_and_unicode_only
      /builddir/build/BUILD/diffoscope-303-build/diffoscope-303/tests/comparators/test_text.py:74: DeprecationWarning: codecs.open() is deprecated. Use open() instead.
        codecs.open(data("text_iso8859"), encoding="iso8859-1")
    tests/comparators/test_utils.py::test_fuzzy_matching
      /builddir/build/BUILD/diffoscope-303-build/diffoscope-303/tests/comparators/test_utils.py:75: DeprecationWarning: codecs.open() is deprecated. Use open() instead.
        expected_diff = codecs.open(
    ...
    
    When reading text files and when writing files, plain open() is
    equivalent.

commit b19d7e7a67f8a63987297e33a367167a007a4bcc
Author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Date:   Tue Aug 5 08:52:10 2025 +0200

    Replace codecs.open with a simplified reimplementation
    
    python 3.14 doesn't like codecs.open:
    
    tests/test_readers.py: 1 warning
    /builddir/build/BUILD/diffoscope-303-build/diffoscope-303/diffoscope/comparators/text.py:44: DeprecationWarning: codecs.open() is deprecated. Use open() instead.
       ) as my_content, codecs.open(
    ...
    
    In most scenarios, codecs.open and builtins.open are equivalent.
    Unfortunately, the case where the file is opened for reading, 'b' is not
    used in the mode, and an encoding is specified, results in a difference
    in behaviour: whitespace is handled differently.
    
    To avoid the warning, add a trivial reimplementation.

commit d12518047c5667c2c1c8718f03975826c0a54cd1
Author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Date:   Sun Aug 3 11:36:43 2025 +0200

    rpm: fix compat with rpm 6
    
    The python interface in rpm 5.99 (pre-release for 6) dropped
    RPMTAG_HEADERSIGNATURES, because it is not used anymore. But we need
    to work with old and new rpms, so we need that value. Let's just copy
    the enum values into the code. Those values can never change (or be
    reused) because they are used in countless rpms.

commit f145ab20bdf4da4345fb2d05a841a8376196630f
Author: Chris Lamb <lamby@debian.org>
Date:   Fri Aug 22 10:41:39 2025 -0700

    Open new changelog entry for version 306.
    
    Gbp-Dch: ignore
Created: 2019-05-22 Last update: 2025-09-02 22:37
lintian reports 1 warning normal
Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.
Created: 2025-05-31 Last update: 2025-05-31 10:30
1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2024-25711: (needs triaging) diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

You can find information about how to handle this issue in the security team's documentation.

Created: 2024-02-10 Last update: 2025-08-25 07:29
news
[rss feed]
  • [2025-08-25] diffoscope 305 MIGRATED to testing (Debian testing watch)
  • [2025-08-22] Accepted diffoscope 305 (source) into unstable (Chris Lamb)
  • [2025-08-22] Accepted diffoscope 304 (source) into experimental (Chris Lamb)
  • [2025-08-01] Accepted diffoscope 303 (source) into experimental (Chris Lamb)
  • [2025-07-25] Accepted diffoscope 302 (source) into experimental (Chris Lamb)
  • [2025-07-11] Accepted diffoscope 301 (source) into experimental (Chris Lamb)
  • [2025-06-27] Accepted diffoscope 300 (source) into experimental (Chris Lamb)
  • [2025-06-20] Accepted diffoscope 299 (source) into experimental (Chris Lamb)
  • [2025-06-20] diffoscope 297 MIGRATED to testing (Debian testing watch)
  • [2025-06-13] Accepted diffoscope 298 (source) into experimental (Chris Lamb)
  • [2025-05-30] Accepted diffoscope 297 (source) into unstable (Chris Lamb)
  • [2025-05-16] Accepted diffoscope 296 (source) into unstable (Chris Lamb)
  • [2025-05-09] Accepted diffoscope 295 (source) into unstable (Chris Lamb)
  • [2025-04-14] diffoscope 294 MIGRATED to testing (Debian testing watch)
  • [2025-04-11] Accepted diffoscope 294 (source) into unstable (Chris Lamb)
  • [2025-04-02] diffoscope 293 MIGRATED to testing (Debian testing watch)
  • [2025-03-29] Accepted diffoscope 293 (source) into unstable (Chris Lamb)
  • [2025-03-29] Accepted diffoscope 292 (source) into unstable (Chris Lamb)
  • [2025-03-24] diffoscope 291 MIGRATED to testing (Debian testing watch)
  • [2025-03-21] Accepted diffoscope 291 (source) into unstable (Chris Lamb)
  • [2025-03-21] Accepted diffoscope 290 (source) into unstable (Chris Lamb)
  • [2025-02-26] diffoscope 289 MIGRATED to testing (Debian testing watch)
  • [2025-02-21] Accepted diffoscope 289 (source) into unstable (Chris Lamb)
  • [2025-02-10] diffoscope 288 MIGRATED to testing (Debian testing watch)
  • [2025-02-07] Accepted diffoscope 288 (source) into unstable (Chris Lamb)
  • [2025-01-31] Accepted diffoscope 287 (source) into unstable (Chris Lamb)
  • [2025-01-28] diffoscope 286 MIGRATED to testing (Debian testing watch)
  • [2025-01-24] Accepted diffoscope 286 (source) into unstable (Chris Lamb)
  • [2025-01-19] diffoscope 285 MIGRATED to testing (Debian testing watch)
  • [2025-01-17] Accepted diffoscope 285 (source) into unstable (Chris Lamb)
  • 1
  • 2
bugs [bug history graph]
  • all: 30 31
  • RC: 0
  • I&N: 12
  • M&W: 18 19
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian (0, 1)
  • buildd: logs, reproducibility
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • screenshots
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 305
  • 3 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing