diffoscope - Debian Package Tracker

general

source: diffoscope (main)
version: 322
maintainer: Reproducible builds folks (archive) (DMD)
uploaders: Chris Lamb [DMD] – Holger Levsen [DMD] – Mattia Rizzolo [DMD]
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 177
oldstable: 240+deb12u1
stable: 297+deb13u1
stable-bpo: 306~bpo13+1
testing: 321
unstable: 322

versioned links

177: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
240+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
297+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
306~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
321: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
322: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

diffoscope (29 bugs: 0, 12, 17, 0)
diffoscope-minimal (1 bugs: 0, 0, 1, 0)

action needed

Marked for autoremoval on 28 July due to libreoffice, mold: #1140262, #935182 high

Version 321 of diffoscope is marked for autoremoval from testing on Tue 28 Jul 2026. It depends (transitively) on libreoffice, mold, affected by #1140262, #935182. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-06-28 Last update: 2026-06-30 00:17

Debci reports failed tests high

unstable: pass (log)
The tests ran in 0:07:10
Last run: 2026-06-12T23:02:01.000Z
Previous status: unknown

testing: fail (log)
The tests ran in 0:01:59
Last run: 2026-06-25T03:37:06.000Z
Previous status: unknown

stable: pass (log)
The tests ran in 0:04:41
Last run: 2025-11-09T12:05:38.000Z
Previous status: unknown

Created: 2026-06-17 Last update: 2026-06-29 23:33

lintian reports 1 error and 1 warning high

Lintian reports 1 error and 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2026-06-28 Last update: 2026-06-28 03:30

Depends on packages which need a new maintainer normal

The packages that diffoscope depends on which need a new maintainer are:

db-defaults (#1055344)
- Recommends: db-util db-util
- Build-Depends: db-util

Created: 2019-11-22 Last update: 2026-06-30 00:30

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 323, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 3a2303e5d4d207c4f66f4f06fa4393e5daab07ed
Author: Chris Lamb <lamby@debian.org>
Date:   Mon Jun 29 07:52:54 2026 -0700

    Debian adds an extra "Flags:" line in the output of ocamlobjinfo, so adjust the test for cross-distribution compatibility. (Closes: reproducible-builds/diffoscope#430)

commit fade8d04bfdbf473f3930feba7183957372e7fa7
Author: Michael Daniels <mdaniels5757@gmail.com>
Date:   Sun Jun 28 16:20:43 2026 -0400

    fix tests with zipdetails 4.006

commit 3f561070583ccfb837f425d3bc062dd224736621
Author: Chris Lamb <lamby@debian.org>
Date:   Fri Jun 26 08:58:17 2026 -0700

    Open new changelog entry for version 323.
    
    Gbp-Dch: ignore

Created: 2019-05-22 Last update: 2026-06-29 16:31

9 open merge requests in Salsa normal

There are 9 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2025-08-19 Last update: 2026-04-20 18:30

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2024-25711: (needs triaging) diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

You can find information about how to handle this issue in the security team's documentation.

Created: 2024-02-10 Last update: 2026-06-27 00:18

testing migrations

excuses:
- Migration status for diffoscope (321 to 322): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Remove hint for (transitive) dependency: openjdk-21
- ∙ ∙ Too young, only 3 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/d/diffoscope.html
- ∙ ∙ Autopkgtest for diffoscope/322: amd64: Pass, arm64: Pass, i386: Failed (not a regression) ♻ (reference ♻), loong64: Failed (not a regression) ♻ (reference ♻), ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[rss feed]

[2026-06-26] Accepted diffoscope 322 (source) into unstable (Chris Lamb)
[2026-06-25] diffoscope 321 MIGRATED to testing (Debian testing watch)
[2026-06-19] Accepted diffoscope 321 (source) into unstable (Chris Lamb)
[2026-06-19] Accepted diffoscope 320 (source) into unstable (Chris Lamb)
[2026-06-18] diffoscope 319 MIGRATED to testing (Debian testing watch)
[2026-06-12] Accepted diffoscope 319 (source) into unstable (Chris Lamb)
[2026-05-07] diffoscope 318 MIGRATED to testing (Debian testing watch)
[2026-05-01] Accepted diffoscope 318 (source) into unstable (Chris Lamb)
[2026-04-13] diffoscope 317 MIGRATED to testing (Debian testing watch)
[2026-04-10] Accepted diffoscope 317 (source) into unstable (Chris Lamb)
[2026-04-05] diffoscope 316 MIGRATED to testing (Debian testing watch)
[2026-04-02] Accepted diffoscope 316 (source) into unstable (Chris Lamb)
[2026-03-24] diffoscope 315 MIGRATED to testing (Debian testing watch)
[2026-03-20] Accepted diffoscope 315 (source) into unstable (Chris Lamb)
[2026-03-17] diffoscope 314 MIGRATED to testing (Debian testing watch)
[2026-03-13] Accepted diffoscope 314 (source) into unstable (Chris Lamb)
[2026-02-24] diffoscope 313 MIGRATED to testing (Debian testing watch)
[2026-02-20] Accepted diffoscope 313 (source) into unstable (Chris Lamb)
[2026-02-10] diffoscope 312 MIGRATED to testing (Debian testing watch)
[2026-02-06] Accepted diffoscope 312 (source) into unstable (Chris Lamb)
[2026-01-26] diffoscope 311 MIGRATED to testing (Debian testing watch)
[2026-01-23] Accepted diffoscope 311 (source) into unstable (Chris Lamb)
[2026-01-14] diffoscope 310 MIGRATED to testing (Debian testing watch)
[2026-01-09] Accepted diffoscope 310 (source) into unstable (Chris Lamb)
[2025-12-20] Accepted diffoscope 297+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Chris Lamb)
[2025-11-18] diffoscope 309 MIGRATED to testing (Debian testing watch)
[2025-11-14] Accepted diffoscope 309 (source) into unstable (Chris Lamb)
[2025-11-10] diffoscope 308 MIGRATED to testing (Debian testing watch)
[2025-11-07] Accepted diffoscope 308 (source) into unstable (Chris Lamb)
[2025-11-03] diffoscope 307 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 32 33
RC: 0
I&N: 12
M&W: 20 21
F&P: 0
patch: 0

links

homepage
lintian (1, 1)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 319