dpkg - Debian Package Tracker

general

source: dpkg (main)
version: 1.23.2
maintainer: Dpkg Developers (archive) (DMD)
uploaders: Guillem Jover [DMD]
arch: all any
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.20.13
o-o-sec: 1.20.10
oldstable: 1.21.22
stable: 1.22.21
testing: 1.22.21
unstable: 1.23.2

versioned links

1.20.10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.20.13: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.21.22: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.22.21: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.23.2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

dpkg (353 bugs: 0, 131, 222, 0)
dpkg-dev (150 bugs: 0, 45, 105, 0)
dselect (87 bugs: 0, 30, 57, 0)
libdpkg-dev (2 bugs: 0, 0, 2, 0)
libdpkg-perl (13 bugs: 0, 6, 7, 0)

action needed

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

Repository size 562827264 exceeds 500 MiB, blocking it

Created: 2023-02-08 Last update: 2025-12-18 04:02

24 bugs tagged patch in the BTS normal

The BTS contains patches fixing 24 bugs (32 if counting merged bugs), consider including or untagging them.

Created: 2025-01-06 Last update: 2025-12-19 03:30

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2025-6297: (needs triaging) It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-06-30 Last update: 2025-12-18 06:00

testing migrations

excuses:
- Migration status for dpkg (1.22.21 to 1.23.2): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Autopkgtest for devscripts/2.25.30: amd64: Regression ♻ (reference ♻), arm64: Regression ♻ (reference ♻), i386: Regression ♻ (reference ♻), ppc64el: Regression ♻ (reference ♻), s390x: Regression ♻ (reference ♻)
- ∙ ∙ Autopkgtest for dgit/13.18: amd64: Regression ♻ (reference ♻), arm64: Regression ♻ (reference ♻), i386: Regression ♻ (reference ♻), ppc64el: Regression ♻ (reference ♻), s390x: Regression ♻ (reference ♻)
- ∙ ∙ Autopkgtest for dpkg/1.23.2: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Pass, s390x: Pass
- ∙ ∙ Autopkgtest for lintian/2.127.0: amd64: Regression ♻ (reference ♻), arm64: Regression ♻ (reference ♻), i386: Regression ♻ (reference ♻), ppc64el: Regression ♻ (reference ♻), s390x: Regression ♻ (reference ♻)
- ∙ ∙ Autopkgtest for pkg-js-tools/0.16.0: amd64: Regression ♻ (reference ♻), arm64: Regression ♻ (reference ♻), i386: Regression ♻ (reference ♻), ppc64el: Regression ♻ (reference ♻), s390x: Regression ♻ (reference ♻)
- ∙ ∙ Missing build on riscv64
- ∙ ∙ Autopkgtest deferred on riscv64: missing arch:riscv64 build
- ∙ ∙ Lintian check waiting for test results on riscv64 - info
- ∙ ∙ Too young, only 1 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/d/dpkg.html
- ∙ ∙ Reproducible on amd64 - info ♻
- ∙ ∙ Reproducible on arm64 - info ♻
- Not considered

news

[rss feed]

[2025-12-18] Accepted dpkg 1.23.2 (source) into unstable (Guillem Jover)
[2025-12-17] Accepted dpkg 1.23.1 (source) into unstable (Guillem Jover)
[2025-12-16] Accepted dpkg 1.23.0 (source) into unstable (Guillem Jover)
[2025-07-09] dpkg 1.22.21 MIGRATED to testing (Debian testing watch)
[2025-07-02] Accepted dpkg 1.22.21 (source) into unstable (Guillem Jover)
[2025-06-10] dpkg 1.22.20 MIGRATED to testing (Debian testing watch)
[2025-06-04] Accepted dpkg 1.22.20 (source) into unstable (Guillem Jover)
[2025-05-30] dpkg 1.22.19 MIGRATED to testing (Debian testing watch)
[2025-05-18] Accepted dpkg 1.22.19 (source) into unstable (Guillem Jover)
[2025-03-14] dpkg 1.22.18 MIGRATED to testing (Debian testing watch)
[2025-03-09] Accepted dpkg 1.22.18 (source) into unstable (Guillem Jover)
[2025-03-07] Accepted dpkg 1.22.17 (source) into unstable (Guillem Jover)
[2025-03-07] Accepted dpkg 1.22.16 (source) into unstable (Guillem Jover)
[2025-02-10] dpkg 1.22.15 MIGRATED to testing (Debian testing watch)
[2025-02-04] dpkg 1.22.14 MIGRATED to testing (Debian testing watch)
[2025-02-03] Accepted dpkg 1.22.15 (source) into unstable (Guillem Jover)
[2025-01-16] Accepted dpkg 1.22.14 (source) into unstable (Guillem Jover)
[2025-01-03] Accepted dpkg 1.22.13 (source) into unstable (Guillem Jover)
[2025-01-01] Accepted dpkg 1.22.12 (source) into unstable (Guillem Jover)
[2024-08-04] dpkg 1.22.11 MIGRATED to testing (Debian testing watch)
[2024-08-01] Accepted dpkg 1.22.11 (source) into unstable (Guillem Jover)
[2024-07-31] dpkg 1.22.10 MIGRATED to testing (Debian testing watch)
[2024-07-28] dpkg 1.22.9 MIGRATED to testing (Debian testing watch)
[2024-07-27] Accepted dpkg 1.22.10 (source) into unstable (Guillem Jover)
[2024-07-24] Accepted dpkg 1.22.9 (source) into unstable (Guillem Jover)
[2024-07-24] dpkg 1.22.8 MIGRATED to testing (Debian testing watch)
[2024-07-24] dpkg 1.22.8 MIGRATED to testing (Debian testing watch)
[2024-07-21] Accepted dpkg 1.22.8 (source) into unstable (Guillem Jover)
[2024-07-21] dpkg 1.22.7 MIGRATED to testing (Debian testing watch)
[2024-07-17] Accepted dpkg 1.22.7 (source) into unstable (Guillem Jover)

bugs [bug history graph]

all: 471 608
RC: 0
I&N: 168 213
M&W: 302 394
F&P: 1
patch: 24 32

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (46, 64)
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.22.21ubuntu5
465 bugs (8 patches)
patches for 1.22.21ubuntu5