Debian Package Tracker
Register | Log in
Subscribe

devscripts

scripts to make the life of a Debian Package maintainer easier

Choose email to subscribe with

general
  • source: devscripts (main)
  • version: 2.26.11
  • maintainer: Devscripts Maintainers (DMD)
  • uploaders: Mattia Rizzolo [DMD] – Holger Levsen [DMD] – Benjamin Drung [DMD]
  • arch: all
  • std-ver: 4.7.3
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 2.21.3+deb11u1
  • oldstable: 2.23.4+deb12u2
  • old-bpo: 2.25.15~bpo12+1
  • stable: 2.25.15+deb13u1
  • stable-bpo: 2.26.11~bpo13+1
  • testing: 2.26.11
  • unstable: 2.26.11
versioned links
  • 2.21.3+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.23.4+deb12u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.25.15~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.25.15+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.26.11~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.26.11: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • devscripts (540 bugs: 1, 216, 323, 0)
action needed
1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:
  • CVE-2025-8454: It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.
Created: 2025-07-14 Last update: 2026-08-21 00:31
1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:
  • CVE-2025-8454: It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.
Created: 2025-08-09 Last update: 2026-08-21 00:31
4 bugs tagged help in the BTS normal
The BTS contains 4 bugs tagged help, please consider helping the maintainer in dealing with them.
Created: 2025-08-23 Last update: 2026-08-28 02:00
37 bugs tagged patch in the BTS normal
The BTS contains patches fixing 37 bugs (39 if counting merged bugs), consider including or untagging them.
Created: 2026-08-15 Last update: 2026-08-28 02:00
Depends on packages which need a new maintainer normal
The packages that devscripts depends on which need a new maintainer are:
  • docbook-xsl (#802370)
    • Build-Depends: docbook-xsl
Created: 2019-11-22 Last update: 2026-08-28 00:31
version in VCS is newer than in repository, is it time to upload? normal
vcswatch reports that this package seems to have a new changelog entry (version 2.26.12, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:
commit 136d55cbaaa67ca78eeecf2b6aebb3a23c30032c
Author: Jochen Sprickerhof <jspricke@debian.org>
Date:   Thu Aug 27 10:05:54 2026 +0200

    Document curl alternative for getbuildlog

commit 27e9248d3500357d930b722df4f08fd0c67495cc
Author: Jochen Sprickerhof <jspricke@debian.org>
Date:   Thu Aug 27 10:03:07 2026 +0200

    getbuildlog: support curl as a wget alternative

commit 83d5d2b9b4bfcd160346885e980eb738063b0652
Author: Serge Schneider <serge@raspberrypi.com>
Date:   Fri Aug 7 10:51:49 2026 +0100

    debrebuild: join env-var list in mmdebstrap chrooted-customize-hook
    
    The trailing string concatenation forced `map` into scalar context, in
    which it returns the count of elements, not the mapped list. env(1) then
    received that count as its command and failed with `env: 'N': No such
    file or directory`.
    
    Regression from #1140552.
    
    Closes: #1145335
    Thanks: Agustin Martin Domingo <agmartin@debian.org>

commit 446b1c6777367896307e5a75ca0334cd2a004a38
Author: Jeremy Sowden <azazel@debian.org>
Date:   Sun Aug 23 11:18:29 2026 +0100

    uscan: fix use of `--download-current-version` with `Version-Constraint: same`
    
    `uscan --download-current-version` fails for Shorewall, which has a number of
    components and uses `Version-Constraint: same`:
    
    ```
      $ head -11 debian/watch
      Version: 5
    
      Source: https://www.shorewall.org/pub/@PACKAGE@/@ANY_VERSION@/@PACKAGE@-@ANY_VERSION@/
      Matching-Pattern: @PACKAGE@-@ANY_VERSION@@ARCHIVE_EXT@
      Pgp-Mode: auto
    
      Component: @PACKAGE@6
      Source: https://www.shorewall.org/pub/@PACKAGE@/@ANY_VERSION@/@PACKAGE@-@ANY_VERSION@/
      Matching-Pattern: @PACKAGE@6-@ANY_VERSION@@ARCHIVE_EXT@
      Pgp-Mode: auto
      Version-Constraint: same
      $ uscan --download-current-version --no-download
      Newest version of shorewall on remote site is 5.2.8, specified download version is 5.2.8
      uscan warn: In debian/watch no matching files for version  in watch line
      uscan warn: In debian/watch no matching files for version  in watch line
      uscan warn: In debian/watch no matching files for version  in watch line
      uscan warn: In debian/watch no matching files for version  in watch line
      uscan warn: In debian/watch no matching files for version  in watch line
      uscan warn: In debian/watch no matching files for version  in watch line
    ```
    
    This happens because `$lastversion` is set to the empty string because of the
    version-constraint, and this is used as the download version because of
    `--download-current-version`.
    
    Instead, set `$lastversion` to `$self->pkg_version`.
    
    Signed-off-by: Jeremy Sowden <azazel@debian.org>

commit 6bca1740d83fef450be1780a9b535635a1ac32cd
Author: Jochen Sprickerhof <jspricke@debian.org>
Date:   Tue Aug 18 06:37:13 2026 +0200

    debootsnap: add missing space

commit abce572e6f5ca071ff38b520be95bc79ccda8b73
Author: Yadnyesh Kolte <yadnyeshkolte@gmail.com>
Date:   Sun Aug 16 12:33:13 2026 +0530

    getbuildlog: chomp versions before sorting so 'last' picks the newest
    
    (cherry picked from commit a7d1b173cdf7ba519bddb2041a2de63fc6e59d47)
    Signed-off-by: Holger Levsen <holger@layer-acht.org>

commit cb1a022c8515f4ac0264fc503ab4a88092a265e3
Author: Yadnyesh Kolte <yadnyeshkolte@gmail.com>
Date:   Sun Aug 16 12:30:25 2026 +0530

    getbuildlog: URL-encode package name when fetching the log index (Closes: #1120313)
    
    (cherry picked from commit 13117358a4df9e5090a605c39776e4279c9647db)
    Signed-off-by: Holger Levsen <holger@layer-acht.org>

commit c778373fc78af48834c953e35a8363126b74f130
Author: Holger Levsen <holger@layer-acht.org>
Date:   Sun Aug 16 09:55:37 2026 +0200

    Start 2.26.12 development.
    
    d/changelog entries will be written on release
    using the git commit messages.
    
    Use 'gbp dch --since v2.26.11 --multimaint-merge'
    to write d/changelog entries since that last release.
    
    Gbp-Dch: ignore
    Signed-off-by: Holger Levsen <holger@layer-acht.org>


https://salsa.debian.org/api/v4/projects/debian%2Fdevscripts API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
Created: 2026-01-08 Last update: 2026-08-27 09:03
1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:
  • CVE-2025-8454: (needs triaging) It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-08-09 Last update: 2026-08-21 00:31
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.3).
Created: 2026-03-31 Last update: 2026-08-16 18:18
news
[rss feed]
  • [2026-08-23] Accepted devscripts 2.26.11~bpo13+1 (source) into stable-backports (Jochen Sprickerhof)
  • [2026-08-21] devscripts 2.26.11 MIGRATED to testing (Debian testing watch)
  • [2026-08-16] Accepted devscripts 2.26.11 (source) into unstable (Holger Levsen)
  • [2026-07-08] devscripts 2.26.10 MIGRATED to testing (Debian testing watch)
  • [2026-07-06] Accepted devscripts 2.26.10 (source) into unstable (Jochen Sprickerhof)
  • [2026-06-22] Accepted devscripts 2.26.9~bpo13+1 (source) into stable-backports (Christoph Berg)
  • [2026-05-27] devscripts 2.26.9 MIGRATED to testing (Debian testing watch)
  • [2026-05-17] Accepted devscripts 2.26.9 (source) into unstable (Jochen Sprickerhof)
  • [2026-05-13] Accepted devscripts 2.26.8 (source) into unstable (Holger Levsen)
  • [2026-04-03] Accepted devscripts 2.26.7~bpo13+1 (source) into stable-backports (Jochen Sprickerhof)
  • [2026-04-03] devscripts 2.26.7 MIGRATED to testing (Debian testing watch)
  • [2026-03-31] Accepted devscripts 2.26.7 (source) into unstable (Benjamin Drung)
  • [2026-03-12] Accepted devscripts 2.26.6~bpo13+1 (source) into stable-backports (Jochen Sprickerhof)
  • [2026-03-12] devscripts 2.26.6 MIGRATED to testing (Debian testing watch)
  • [2026-03-09] Accepted devscripts 2.26.6 (source) into unstable (Jochen Sprickerhof)
  • [2026-01-20] devscripts 2.26.5 MIGRATED to testing (Debian testing watch)
  • [2026-01-18] Accepted devscripts 2.26.5 (source) into unstable (Holger Levsen)
  • [2026-01-18] devscripts 2.26.4 MIGRATED to testing (Debian testing watch)
  • [2026-01-12] Accepted devscripts 2.26.4 (source) into unstable (Holger Levsen)
  • [2026-01-10] devscripts 2.26.3 MIGRATED to testing (Debian testing watch)
  • [2026-01-08] Accepted devscripts 2.26.3 (source) into unstable (Holger Levsen)
  • [2026-01-07] Accepted devscripts 2.26.2 (source) into unstable (Holger Levsen)
  • [2026-01-07] devscripts 2.26.1 MIGRATED to testing (Debian testing watch)
  • [2026-01-04] Accepted devscripts 2.26.1 (source) into unstable (Holger Levsen)
  • [2026-01-01] devscripts 2.25.33 MIGRATED to testing (Debian testing watch)
  • [2025-12-29] Accepted devscripts 2.25.33 (source) into unstable (Daniel Gröber)
  • [2025-12-22] Accepted devscripts 2.25.32 (source) into unstable (Daniel Gröber)
  • [2025-12-16] Accepted devscripts 2.25.31 (source) into unstable (Holger Levsen)
  • [2025-12-12] devscripts 2.25.30 MIGRATED to testing (Debian testing watch)
  • [2025-12-09] Accepted devscripts 2.25.30 (source) into unstable (Holger Levsen)
  • 1
  • 2
bugs [bug history graph]
  • all: 533 549
  • RC: 1
  • I&N: 213 218
  • M&W: 316 326
  • F&P: 3 4
  • patch: 37 39
  • help: 4
  • NC: 3
links
  • lintian
  • buildd: logs, reproducibility
  • popcon
  • browse source code
  • other distros
  • security tracker
  • l10n (88, -)
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 2.26.11

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing