Package: devscripts
Version: 2.23.4+deb12u1
Severity: important
File: /usr/bin/uscan
X-Debbugs-Cc: deb...@rocketjump.eu
Hi,
when the tarball and signature file already exists, uscan will skip downloading
the tarball, but will unconditionally re-download the signature file. In my
specific case upstream has opted to build a bot detection on their web page,
which then instead serves a HTML file with a captcha. This causes the previous
signature file (that verifies) to be replaced with a HTML file that of course
does not verify anymore.
Together with a related bug (#1072008) in gbp it makes it really hard to
actually import a tarball with signature in such a scenario. As developers might
be tempted to skip signature checks (which would be one workaround), I'm setting
the severity to important.
I believe that the right thing to do is to skip downloading the signature file,
as it's consistent with already skipping downloading the tarball.
Greets,
Lee
Full transcript below:
---8<------8<------8<------8<------8<------8<------8<------8<---
$ cat debian/watch
version=4
opts="pgpmode=mangle,pgpsigurlmangle=s%$%.sig%,filenamemangle=s%[^?]+\?file=(.+)%$1%"
\
https://dianne.skoll.ca/projects/rp-pppoe/ \
download.php\?file=rp-pppoe-(4.0).tar.gz \
debian uupdate
$ gpg --verify ../rp-pppoe-4.0.tar.gz.sig ../rp-pppoe-4.0.tar.gz
gpg: Signature made Mi 26 Apr 2023 21:02:53 CEST
gpg: using RSA key 738E4D954052902C147D07B2685A5A5E511D30E2
gpg: issuer "dia...@skoll.ca"
gpg: Good signature from "Dianne Skoll <dia...@skollsoft.com>" [unknown]
gpg: aka "Dianne Skoll <dia...@skoll.ca>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 738E 4D95 4052 902C 147D 07B2 685A 5A5E 511D 30E2
$ head debian/changelog
rp-pppoe (3.15-2) unstable; urgency=medium
* Update upstream contact email address
* Bump Standards-Version (no changes needed)
* Update d/copyright
* Fix lintian override
* Update hardening flag according to wiki
* Add hardening build flags to Makefile
* Remove superfluous lintian override
$ uscan -vvv
uscan info: uscan (version 2.23.4+deb12u1) See uscan(1) for help
uscan info: Scan watch files in .
uscan debug: Found ./debian
uscan info: Check debian/watch and debian/changelog in .
uscan info: package="rp-pppoe" version="3.15-2" (as seen in debian/changelog)
uscan info: package="rp-pppoe" version="3.15" (no epoch/revision)
uscan info: ./debian/changelog sets package="rp-pppoe" version="3.15"
uscan info: Found upstream signing keyring: debian/upstream/signing-key.asc
uscan info: Process watch file at: debian/watch
package = rp-pppoe
version = 3.15
pkg_dir = .
uscan debug: parse line
opts="pgpmode=mangle,pgpsigurlmangle=s%$%.sig%,filenamemangle=s%[^?]+\?file=(.+)%$1%"
https://dianne.skoll.ca/projects/rp-pppoe/
download.php\?file=rp-pppoe-(4.0).tar.gz debian uupdate
uscan info: opts:
pgpmode=mangle,pgpsigurlmangle=s%$%.sig%,filenamemangle=s%[^?]+\?file=(.+)%$1%
uscan info: line: https://dianne.skoll.ca/projects/rp-pppoe/
download.php\?file=rp-pppoe-(4.0).tar.gz debian uupdate
uscan info: Parsing pgpmode=mangle
uscan info: Parsing pgpsigurlmangle=s%$%.sig%
uscan info: Parsing filenamemangle=s%[^?]+\?file=(.+)%$1%
uscan info: line: https://dianne.skoll.ca/projects/rp-pppoe/
download.php\?file=rp-pppoe-(4.0).tar.gz debian uupdate
uscan debug: $self->{'pgpmode'}=mangle, $self->{'pgpsigurlmangle'}=s%$%.sig%
uscan info: Last orig.tar.* tarball version (from debian/changelog): 3.15
uscan info: Last orig.tar.* tarball version (dversionmangled): 3.15
uscan debug: watch file has:
$base = https://dianne.skoll.ca/projects/rp-pppoe/
$filepattern = download.php\?file=rp-pppoe-(4.0).tar.gz
$lastversion = 3.15
$action = uupdate
mode = http
pgpmode = mangle
versionmode = newer
$site = https://dianne.skoll.ca
$basedir = /projects/rp-pppoe/
uscan debug: line: search()
uscan info: Requesting URL:
https://dianne.skoll.ca/projects/rp-pppoe/
uscan debug: received content:
<!DOCTYPE html>
<html lang="en">
<head>
<meta name="viewport" content="width=device-width, initial-scale=1,
shrink-to-fit=no">
<link href="/css/open-sans.css" rel="stylesheet"><link
href="/css/bootstrap.min.css" rel="stylesheet">
<link href="/css/ds.css" rel="stylesheet">
<meta charset="utf-8">
<title>Dianne Skoll's Web Site - RP-PPPoE - Software Projects</title>
</head>
<body class="d-flex flex-column h-100 dianne">
<header>
<nav class="pl-0 pt-0 pb-0 navbar navbar-dark navbar-expand-md fixed-top
navbar-custom">
<button class="navbar-toggler" type="button" data-toggle="collapse"
data-target="#navbarCollapse" aria-controls="navbarCollapse"
aria-expanded="false" aria-label="Toggle navigation">
<span class="navbar-toggler-icon"></span>
</button>
<div class="collapse navbar-collapse" id="navbarCollapse">
<ul class="navbar-nav mr-auto">
<li class="nav-item nav-item-custom"><a class="nav-link
nav-link-custom" href="/">Home</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/contact.php">Contact</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/projects/">Software</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/comedy/">Comedy</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/writings/">Writings</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/store/">Store</a>
</ul>
<ul class="navbar-nav ml-auto">
<li class="nav-item searchbox"><form class="form-inline"
method="POST" action="/cgi-bin/htsearch"><input class="pt-0 pb-0 form-control"
style="font-size: 85%; height: 1.5rem" type="search" placeholder="Search..."
name="words" width="15"></form>
</ul>
</div>
</nav>
<h1 class="mt-1"> </h1>
</header>
<main role="main" class="flex-shrink-0">
<div class="container-fluid pl-1 pr-1">
<img src="/imgs/network-3607641_640.jpg" style="float: right">
<h1>RP-PPPoE</h1>
<p>PPPoE (Point-to-Point Protocol over Ethernet) is a protocol used
by many DSL Internet Service Providers. RP-PPPoE is a free PPPoE
client, relay and server for Linux.</p>
<h2>Commercial PPPoE Server</h2>
<p>Fine Point Networks sells a commercial PPPoE server based on rp-pppoe;
their product is called ServPoET BMS.</p>
<h2>Download RP-PPPoE</h2>
<p>You can download RP-PPPoE here:</p>
<ul><li><a
href="/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz">rp-pppoe-4.0.tar.gz</a>
</li><li><a
href="/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz.sig">GPG
Signature</a>
</li></ul>
<!-- <h2>Download the BETA Version</h2>
<p>This is the current BETA version. It might eat your computer. It might
attack your cat.
Basically... all bets are off with BETA versions...</p>
<ul><li><a
href="/projects/rp-pppoe/download.php?file=rp-pppoe-4.0-beta1.tar.gz">rp-pppoe-4.0-beta1.tar.gz</a>
</li><li><a
href="/projects/rp-pppoe/download.php?file=rp-pppoe-4.0-beta1.tar.gz.sig">GPG
Signature</a>
</li></ul> -->
<h2>Public Git Repository</h2>
<p>RP-PPPoE has a public Git repo at <a
href="https://salsa.debian.org/dskoll/rp-pppoe";>https://salsa.debian.org/dskoll/rp-pppoe</a></p>
<p><script src="https://liberapay.com/dskoll/widgets/button.js";></script>
<noscript><a href="https://liberapay.com/dskoll/donate";><img alt="Donate using
Liberapay" src="https://liberapay.com/assets/widgets/donate.svg";></a></noscript>
<h3>Oh, one little thing...</h3>
<p>If you are coming from one
of <a
href="https://www.microsoft.com/en-us/download/details.aspx?id=53602";>Microsoft's
Public IP Addresses</a>, then you <em> will not</em> be able to
download RP-PPPoE. I'm sorry about that, but someone/something
keeps re-downloading the tarball every few minutes from that
address range and it eats up a lot of bandwidth. The source IP
address keeps changing, too, so I've had no choice but to block
the entire address space from downloading the tarball. If you
find this to be a problem, please
email <a href="mailto:ab...@microsoft.com";>ab...@microsoft.com</a>.
<p><a href="logs.php">Here are some logs</a>.
<h2>Support</h2>
<p>RP-PPPoE is free software; it comes without warranty or
support. I regret that I cannot offer e-mail or telephone support
for RP-PPPoE. If you received RP-PPPoE as part of a Linux
distribution you paid for, you may have the right to support from
the distribution vendor. Try your vendor first.</p>
<h2>Mailing List</h2>
<p>I run a mailing list for RP-PPPoE; please visit the <a
href="/mailman/listinfo/rp-pppoe">list information page</a> to sign up.</p>
</div>
<hr>
<div class="footer"><a href="/">Back Home</a>
<a href="/projects/">Software Projects</a></div>
<p style="margin: auto; text-align: center; width: 100%">Copyright © 2024
Dianne Skoll</p>
<script src="/js/jquery-3.6.0.min.js"></script><script
src="/js/bootstrap.bundle.min.js"></script>
</main>
</body></html>
[End of received content] by HTTP
uscan debug: processed content:
<!DOCTYPE html>
<html lang="en">
<head>
<meta name="viewport" content="width=device-width, initial-scale=1,
shrink-to-fit=no">
<link href="/css/open-sans.css" rel="stylesheet"><link
href="/css/bootstrap.min.css" rel="stylesheet">
<link href="/css/ds.css" rel="stylesheet">
<meta charset="utf-8">
<title>Dianne Skoll's Web Site - RP-PPPoE - Software Projects</title>
</head>
<body class="d-flex flex-column h-100 dianne">
<header>
<nav class="pl-0 pt-0 pb-0 navbar navbar-dark navbar-expand-md fixed-top
navbar-custom">
<button class="navbar-toggler" type="button" data-toggle="collapse"
data-target="#navbarCollapse" aria-controls="navbarCollapse"
aria-expanded="false" aria-label="Toggle navigation">
<span class="navbar-toggler-icon"></span>
</button>
<div class="collapse navbar-collapse" id="navbarCollapse">
<ul class="navbar-nav mr-auto">
<li class="nav-item nav-item-custom"><a class="nav-link
nav-link-custom" href="/">Home</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/contact.php">Contact</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/projects/">Software</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/comedy/">Comedy</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/writings/">Writings</a>
<li class="nav-item"><a class="nav-link nav-link-custom"
href="/store/">Store</a>
</ul>
<ul class="navbar-nav ml-auto">
<li class="nav-item searchbox"><form class="form-inline"
method="POST" action="/cgi-bin/htsearch"><input class="pt-0 pb-0 form-control"
style="font-size: 85%; height: 1.5rem" type="search" placeholder="Search..."
name="words" width="15"></form>
</ul>
</div>
</nav>
<h1 class="mt-1"> </h1>
</header>
<main role="main" class="flex-shrink-0">
<div class="container-fluid pl-1 pr-1">
<img src="/imgs/network-3607641_640.jpg" style="float: right">
<h1>RP-PPPoE</h1>
<p>PPPoE (Point-to-Point Protocol over Ethernet) is a protocol used
by many DSL Internet Service Providers. RP-PPPoE is a free PPPoE
client, relay and server for Linux.</p>
<h2>Commercial PPPoE Server</h2>
<p>Fine Point Networks sells a commercial PPPoE server based on rp-pppoe;
their product is called ServPoET BMS.</p>
<h2>Download RP-PPPoE</h2>
<p>You can download RP-PPPoE here:</p>
<ul><li><a
href="/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz">rp-pppoe-4.0.tar.gz</a>
</li><li><a
href="/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz.sig">GPG
Signature</a>
</li></ul>
<h2>Public Git Repository</h2>
<p>RP-PPPoE has a public Git repo at <a
href="https://salsa.debian.org/dskoll/rp-pppoe";>https://salsa.debian.org/dskoll/rp-pppoe</a></p>
<p><script src="https://liberapay.com/dskoll/widgets/button.js";></script>
<noscript><a href="https://liberapay.com/dskoll/donate";><img alt="Donate using
Liberapay" src="https://liberapay.com/assets/widgets/donate.svg";></a></noscript>
<h3>Oh, one little thing...</h3>
<p>If you are coming from one
of <a
href="https://www.microsoft.com/en-us/download/details.aspx?id=53602";>Microsoft's
Public IP Addresses</a>, then you <em> will not</em> be able to
download RP-PPPoE. I'm sorry about that, but someone/something
keeps re-downloading the tarball every few minutes from that
address range and it eats up a lot of bandwidth. The source IP
address keeps changing, too, so I've had no choice but to block
the entire address space from downloading the tarball. If you
find this to be a problem, please
email <a href="mailto:ab...@microsoft.com";>ab...@microsoft.com</a>.
<p><a href="logs.php">Here are some logs</a>.
<h2>Support</h2>
<p>RP-PPPoE is free software; it comes without warranty or
support. I regret that I cannot offer e-mail or telephone support
for RP-PPPoE. If you received RP-PPPoE as part of a Linux
distribution you paid for, you may have the right to support from
the distribution vendor. Try your vendor first.</p>
<h2>Mailing List</h2>
<p>I run a mailing list for RP-PPPoE; please visit the <a
href="/mailman/listinfo/rp-pppoe">list information page</a> to sign up.</p>
</div>
<hr>
<div class="footer"><a href="/">Back Home</a>
<a href="/projects/">Software Projects</a></div>
<p style="margin: auto; text-align: center; width: 100%">Copyright © 2024
Dianne Skoll</p>
<script src="/js/jquery-3.6.0.min.js"></script><script
src="/js/bootstrap.bundle.min.js"></script>
</main>
</body></html>
[End of processed content] by fix bad HTML code
uscan info: Matching pattern:
(?:(?:https://dianne.skoll.ca)?\/projects\/rp\-pppoe\/)?download.php\?file=rp-pppoe-(4.0).tar.gz
uscan debug: Checking href /
uscan debug: Checking href https://dianne.skoll.ca/
uscan debug: Checking href /contact.php
uscan debug: Checking href https://dianne.skoll.ca/contact.php
uscan debug: Checking href /projects/
uscan debug: Checking href https://dianne.skoll.ca/projects/
uscan debug: Checking href /comedy/
uscan debug: Checking href https://dianne.skoll.ca/comedy/
uscan debug: Checking href /writings/
uscan debug: Checking href https://dianne.skoll.ca/writings/
uscan debug: Checking href /store/
uscan debug: Checking href https://dianne.skoll.ca/store/
uscan debug: Checking href
/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
uscan debug: Checking href
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
uscan debug: Checking href
/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz.sig
uscan debug: Checking href
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz.sig
uscan debug: Checking href https://salsa.debian.org/dskoll/rp-pppoe
uscan debug: Checking href https://salsa.debian.org/dskoll/rp-pppoe
uscan debug: Checking href https://liberapay.com/dskoll/donate
uscan debug: Checking href https://liberapay.com/dskoll/donate
uscan debug: Checking href
https://www.microsoft.com/en-us/download/details.aspx?id=53602
uscan debug: Checking href
https://www.microsoft.com/en-us/download/details.aspx?id=53602
uscan debug: Checking href mailto:ab...@microsoft.com
uscan debug: Checking href
https://dianne.skoll.ca/projects/rp-pppoe/mailto:ab...@microsoft.com
uscan debug: Checking href logs.php
uscan debug: Checking href https://dianne.skoll.ca/projects/rp-pppoe/logs.php
uscan debug: Checking href /mailman/listinfo/rp-pppoe
uscan debug: Checking href https://dianne.skoll.ca/mailman/listinfo/rp-pppoe
uscan debug: Checking href /
uscan debug: Checking href https://dianne.skoll.ca/
uscan debug: Checking href /projects/
uscan debug: Checking href https://dianne.skoll.ca/projects/
uscan info: Found the following matching hrefs on the web page (newest first):
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
(4.0) index=4.0-1
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
(4.0) index=4.0-1
uscan info: Looking at $base = https://dianne.skoll.ca/projects/rp-pppoe/ with
$filepattern = download.php\?file=rp-pppoe-(4.0).tar.gz found
$newfile =
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
$newversion = 4.0
$lastversion = 3.15
uscan debug: line: get_upstream_url()
uscan info: Matching target for downloadurlmangle:
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
uscan info: Upstream URL(+tag) to download is identified as
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
uscan debug: line: get_newfile_base()
uscan info: Matching target for filenamemangle:
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
uscan debug: safe_replace
input="https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz";
uscan debug: safe_replace with regexp="[^?]+\?file=(.+)", replacement="$1", and
flags=""
uscan debug: After filenamemangle: rp-pppoe-4.0.tar.gz
uscan info: Filename (filenamemangled) for downloaded file: rp-pppoe-4.0.tar.gz
uscan debug: line: cmp_versions()
Newest version of rp-pppoe on remote site is 4.0, local version is 3.15
=> Newer package available from:
=>
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz
uscan debug: line: download_file_and_sig()
uscan info: Not downloading, using existing file: rp-pppoe-4.0.tar.gz
uscan debug: safe_replace
input="https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz";
uscan debug: safe_replace with regexp="$", replacement=".sig", and flags=""
uscan debug: After pgpsigurlmangle:
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz.sig
uscan debug: Add sig suffix based on
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz.sig.
uscan info: Downloading OpenPGP signature from:
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz.sig
(pgpsigurlmangled)
as rp-pppoe-4.0.tar.gz.sig
uscan info: Requesting URL:
https://dianne.skoll.ca/projects/rp-pppoe/download.php?file=rp-pppoe-4.0.tar.gz.sig
uscan info: Verifying OpenPGP signature ../rp-pppoe-4.0.tar.gz.sig for
../rp-pppoe-4.0.tar.gz
uscan debug: Execute: gpgv --homedir /dev/null --keyring
/tmp/FL614h9GMv/trustedkeys.gpg ../rp-pppoe-4.0.tar.gz.sig
../rp-pppoe-4.0.tar.gz...
gpgv: no valid OpenPGP data found.
gpgv: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.
uscan die: OpenPGP signature did not verify. [Devscripts::Uscan::Keyring: 113]
at /usr/share/perl5/Devscripts/Uscan/Output.pm line 77.
$ gpg --verify ../rp-pppoe-4.0.tar.gz.sig ../rp-pppoe-4.0.tar.gz
gpg: no valid OpenPGP data found.
gpg: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.
---8<------8<------8<------8<------8<------8<------8<------8<---
-- Package-specific info:
--- /etc/devscripts.conf ---
Empty.
--- ~/.devscripts ---
BTS_SMTP_HOST="smtp.rocketjump.eu:587"
DEBSIGN_KEYID="2FE2 163F 611C 80BE 2BF5 EE62 48D1 9F46 BC99 C9B7"
-- System Information:
Debian Release: 12.5
APT prefers stable-updates
APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990,
'proposed-updates'), (990, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-21-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages devscripts depends on:
ii dpkg-dev 1.21.22
ii fakeroot 1.31-1.2
ii file 1:5.44-3
ii gnupg 2.2.40-1.1
ii gpgv 2.2.40-1.1
ii libc6 2.36-9+deb12u7
ii libfile-dirlist-perl 0.05-3
ii libfile-homedir-perl 1.006-2
ii libfile-touch-perl 0.12-2
ii libfile-which-perl 1.27-2
ii libipc-run-perl 20220807.0-1
ii libmoo-perl 2.005005-1
ii libwww-perl 6.68-1
ii patchutils 0.4.2-1
ii perl 5.36.0-7+deb12u1
ii python3 3.11.2-1+b1
ii sensible-utils 0.0.17+nmu1
ii wdiff 1.2.2-5
Versions of packages devscripts recommends:
ii apt 2.6.1
ii curl 7.88.1-10+deb12u6
ii dctrl-tools 2.24-3+b1
ii debian-keyring 2022.12.24
ii dput-ng [dput] 1.35+deb12u1
pn equivs <none>
ii libdistro-info-perl 1.5+deb12u1
ii libdpkg-perl 1.21.22
ii libencode-locale-perl 1.05-3
pn libgit-wrapper-perl <none>
pn libgitlab-api-v4-perl <none>
ii liblist-compare-perl 0.55-2
ii liblwp-protocol-https-perl 6.10-1
pn libsoap-lite-perl <none>
ii libstring-shellquote-perl 1.04-3
ii libtry-tiny-perl 0.31-2
ii liburi-perl 5.17-1
ii licensecheck 3.3.5-1
ii lintian 2.117.0
ii man-db 2.11.2-2
ii patch 2.7.6-7
ii pristine-tar 1.50
ii python3-apt 2.6.0
ii python3-debian 0.1.49
ii python3-magic 2:0.4.26-3
ii python3-requests 2.28.1+dfsg-1
pn python3-unidiff <none>
ii python3-xdg 0.28-2
ii strace 6.1-0.1
ii unzip 6.0-28
ii wget 1.21.3-1+b2
ii xz-utils 5.4.1-0.2
Versions of packages devscripts suggests:
ii adequate 0.15.9~deb12u1
pn at <none>
ii autopkgtest 5.28
pn bls-standalone <none>
pn bsd-mailx | mailx <none>
ii build-essential 12.9
pn check-all-the-things <none>
pn cvs-buildpackage <none>
ii debhelper 13.11.4
ii diffoscope 240
ii disorderfs 0.5.11-3
pn dose-extra <none>
pn duck <none>
pn elpa-devscripts <none>
ii faketime 0.9.10-2.1
pn gnuplot <none>
pn how-can-i-help <none>
ii libauthen-sasl-perl 2.1600-3
pn libdbd-pg-perl <none>
ii libfile-desktopentry-perl 0.22-3
pn libterm-size-perl <none>
ii libtimedate-perl 2.3300-2
ii libyaml-syck-perl 1.34-2+b1
ii mmdebstrap 1.3.5-7
pn mozilla-devscripts <none>
pn mutt <none>
ii openssh-client [ssh-client] 1:9.2p1-2+deb12u2
ii piuparts 1.1.7
ii postgresql-client 15+248
ii postgresql-client-15 [postgresql-client] 15.7-0+deb12u1
pn pristine-lfs <none>
ii quilt 0.67+really0.66-1
pn ratt <none>
pn reprotest <none>
pn svn-buildpackage <none>
pn w3m <none>
-- no debconf information
![https://liberapay.com/assets/widgets/donate.svg"](https://liberapay.com/assets/widgets/donate.svg"){kind=link}