devscripts - Debian Package Tracker

general

source: devscripts (main)
version: 2.26.10
maintainer: Devscripts Maintainers (DMD)
uploaders: Holger Levsen [DMD] – Benjamin Drung [DMD] – Mattia Rizzolo [DMD]
arch: all
std-ver: 4.7.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.21.3+deb11u1
oldstable: 2.23.4+deb12u2
old-bpo: 2.25.15~bpo12+1
stable: 2.25.15+deb13u1
stable-bpo: 2.26.9~bpo13+1
testing: 2.26.10
unstable: 2.26.10

versioned links

2.21.3+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.23.4+deb12u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.25.15~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.25.15+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.26.9~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.26.10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

devscripts (535 bugs: 1, 213, 321, 0)

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2025-8454: It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.

Created: 2025-07-14 Last update: 2026-07-08 07:32

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2025-8454: It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.

Created: 2025-08-09 Last update: 2026-07-08 07:32

4 bugs tagged help in the BTS normal

The BTS contains 4 bugs tagged help, please consider helping the maintainer in dealing with them.

Created: 2025-08-23 Last update: 2026-07-26 11:30

37 bugs tagged patch in the BTS normal

The BTS contains patches fixing 37 bugs (39 if counting merged bugs), consider including or untagging them.

Created: 2026-06-02 Last update: 2026-07-26 11:30

Depends on packages which need a new maintainer normal

The packages that devscripts depends on which need a new maintainer are:

docbook-xsl (#802370)
- Build-Depends: docbook-xsl

Created: 2019-11-22 Last update: 2026-07-26 10:18

25 open merge requests in Salsa normal

There are 25 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2025-09-17 Last update: 2026-07-22 07:32

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.26.11, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit a65706e73d9bd1b5c58f4e8838898514761b894e
Author: Benjamin Drung <bdrung@debian.org>
Date:   Thu Jul 16 10:34:09 2026 +0200

    Keep mmdebstrap in Suggests for Ubuntu for now
    
    mmdebstrap is currently in Ubuntu universe. Keep mmdebstrap in Suggests
    for Ubuntu for now until the MIR for mmdebstrap is done. See
    https://launchpad.net/bugs/2087937

commit f58bc82a3dd1b08270a819396cea50640dc12d78
Author: Benjamin Drung <bdrung@debian.org>
Date:   Thu Jul 16 10:28:34 2026 +0200

    Sort dependencies with wrap-and-sort

commit 6b1770b5306b3e9f0dcc613a3fc7f1eb98242b78
Author: Benjamin Drung <bdrung@debian.org>
Date:   Thu Jul 16 10:26:45 2026 +0200

    Document why Ubuntu demotes some Recomments to Suggsts

commit 600af5d66a4ef7026fc22abc07d990051877c53c
Author: Benjamin Drung <bdrung@debian.org>
Date:   Thu Jul 16 10:24:50 2026 +0200

    Recommend liblwp-protocol-https-perl on Ubuntu as well
    
    liblwp-protocol-https-perl is needed by udev to use https URLs which is
    quite common nowadays. liblwp-protocol-https-perl is in Ubuntu main. So
    recommend liblwp-protocol-https-perl on Ubuntu as well.
    
    Fixes: 1349b13f43a3 ("Move liblwb-protocol-https-perl from Recommends to UBU_SUGGESTS")

commit a97c62ec4f4b1d8dd23709a7f8205cb0f9ff944a
Author: Jochen Sprickerhof <jspricke@debian.org>
Date:   Sun May 17 16:37:29 2026 +0200

    Start 2.26.11 development.
    
    d/changelog entries will be written on release
    using the git commit messages.
    
    Use 'gbp dch --since v2.26.10 --multimaint-merge'
    to write d/changelog entries since that last release.
    
    Gbp-Dch: ignore

Created: 2026-01-08 Last update: 2026-07-22 07:32

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2026-07-06 Last update: 2026-07-06 22:47

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2025-8454: (needs triaging) It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-08-09 Last update: 2026-07-08 07:32

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2025-8454: (needs triaging) It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-07-14 Last update: 2026-07-08 07:32

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2026-01-08 Last update: 2026-03-10 09:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.3).

Created: 2026-03-31 Last update: 2026-07-06 18:18

news

[rss feed]

[2026-07-08] devscripts 2.26.10 MIGRATED to testing (Debian testing watch)
[2026-07-06] Accepted devscripts 2.26.10 (source) into unstable (Jochen Sprickerhof)
[2026-06-22] Accepted devscripts 2.26.9~bpo13+1 (source) into stable-backports (Christoph Berg)
[2026-05-27] devscripts 2.26.9 MIGRATED to testing (Debian testing watch)
[2026-05-17] Accepted devscripts 2.26.9 (source) into unstable (Jochen Sprickerhof)
[2026-05-13] Accepted devscripts 2.26.8 (source) into unstable (Holger Levsen)
[2026-04-03] Accepted devscripts 2.26.7~bpo13+1 (source) into stable-backports (Jochen Sprickerhof)
[2026-04-03] devscripts 2.26.7 MIGRATED to testing (Debian testing watch)
[2026-03-31] Accepted devscripts 2.26.7 (source) into unstable (Benjamin Drung)
[2026-03-12] Accepted devscripts 2.26.6~bpo13+1 (source) into stable-backports (Jochen Sprickerhof)
[2026-03-12] devscripts 2.26.6 MIGRATED to testing (Debian testing watch)
[2026-03-09] Accepted devscripts 2.26.6 (source) into unstable (Jochen Sprickerhof)
[2026-01-20] devscripts 2.26.5 MIGRATED to testing (Debian testing watch)
[2026-01-18] Accepted devscripts 2.26.5 (source) into unstable (Holger Levsen)
[2026-01-18] devscripts 2.26.4 MIGRATED to testing (Debian testing watch)
[2026-01-12] Accepted devscripts 2.26.4 (source) into unstable (Holger Levsen)
[2026-01-10] devscripts 2.26.3 MIGRATED to testing (Debian testing watch)
[2026-01-08] Accepted devscripts 2.26.3 (source) into unstable (Holger Levsen)
[2026-01-07] Accepted devscripts 2.26.2 (source) into unstable (Holger Levsen)
[2026-01-07] devscripts 2.26.1 MIGRATED to testing (Debian testing watch)
[2026-01-04] Accepted devscripts 2.26.1 (source) into unstable (Holger Levsen)
[2026-01-01] devscripts 2.25.33 MIGRATED to testing (Debian testing watch)
[2025-12-29] Accepted devscripts 2.25.33 (source) into unstable (Daniel Gröber)
[2025-12-22] Accepted devscripts 2.25.32 (source) into unstable (Daniel Gröber)
[2025-12-16] Accepted devscripts 2.25.31 (source) into unstable (Holger Levsen)
[2025-12-12] devscripts 2.25.30 MIGRATED to testing (Debian testing watch)
[2025-12-09] Accepted devscripts 2.25.30 (source) into unstable (Holger Levsen)
[2025-12-09] devscripts 2.25.29 MIGRATED to testing (Debian testing watch)
[2025-12-04] Accepted devscripts 2.25.29 (source) into unstable (Holger Levsen)
[2025-12-04] devscripts 2.25.28 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 525 541
RC: 1
I&N: 209 215
M&W: 314 324
F&P: 1
patch: 37 39
help: 4
NC: 3

links

lintian (0, 1)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
l10n (88, -)
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.26.10