Dear maintainer:

During a rebuild of all packages in unstable, this package failed to build.

Below you will find the last part of the build log (probably the most
relevant part, but not necessarily). If required, the full build log
is available here:

https://people.debian.org/~sanvila/build-logs/202609/

About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.

If you cannot reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.

If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:debsig-verify, so that this is still
visible in the BTS web page for this package.

Thanks.
--------------------------------------------------------------------------------
[...]
/usr/bin/mkdir -p doc
sed -e 's,@POLICIES_DIR@,/etc/debsig/policies,g' -e 's,@KEYRINGS_DIR@,/usr/share/debsig/keyrings,g' -e 's,%RELEASE_DATE%,,g' -e 's,%PACKAGE_VERSION%,0.34,g' < ../doc/debsig-verify.1.in > doc/debsig-verify.1
x86_64-linux-gnu-gcc -DHAVE_CONFIG_H   -I. -DLIBDPKG_VOLATILE_API=1 -DDEBSIG_POLICIES_DIR=\"/etc/debsig/policies\" -DDEBSIG_KEYRINGS_DIR=\"/usr/share/debsig/keyrings\"  -Wdate-time -D_FORTIFY_SOURCE=2   -Wall -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o src/ar-parse.o ../src/ar-parse.c
x86_64-linux-gnu-gcc -DHAVE_CONFIG_H   -I. -DLIBDPKG_VOLATILE_API=1 -DDEBSIG_POLICIES_DIR=\"/etc/debsig/policies\" -DDEBSIG_KEYRINGS_DIR=\"/usr/share/debsig/keyrings\"  -Wdate-time -D_FORTIFY_SOURCE=2   -Wall -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o src/debsig-verify.o ../src/debsig-verify.c
../src/ar-parse.c: In function ‘findMember’:
../src/ar-parse.c:101:19: error: implicit declaration of function ‘dpkg_ar_member_get_size’; did you mean ‘dpkg_ar_member_put_file’? [-Wimplicit-function-declaration]
   101 |         mem_len = dpkg_ar_member_get_size(deb, &arh);
       |                   ^~~~~~~~~~~~~~~~~~~~~~~
       |                   dpkg_ar_member_put_file
make[3]: *** [Makefile:579: src/ar-parse.o] Error 1
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory '/<<PKGBUILDDIR>>/build-tree'
make[2]: *** [Makefile:639: all-recursive] Error 1
make[2]: Leaving directory '/<<PKGBUILDDIR>>/build-tree'
make[1]: *** [Makefile:437: all] Error 2
make[1]: Leaving directory '/<<PKGBUILDDIR>>/build-tree'
dh_auto_build: error: cd build-tree && make -j2 returned exit code 2
make: *** [debian/rules:12: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2
--------------------------------------------------------------------------------

Hi!

Bug #1148191 in package debsig-verify reported by you has been fixed in
the dpkg/debsig-verify.git Git repository. You can see the changelog below, and
you can check the diff of the fix at:

https://git.dpkg.org/cgit/dpkg/debsig-verify.git/diff/?id=0007ce4
---
Update for new libdpkg-dev >= 1.23.8 API changes

The dpkg_ar_member_get_size() function got renamed to
dpkg_ar_member_parse_size(), adapt the code to match.

Closes: #1148191

We believe that the bug you reported is fixed in the latest version of
debsig-verify, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1148191@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Guillem Jover <guillem@debian.org> (supplier of updated debsig-verify package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 18 Sep 2026 03:01:12 +0200
Source: debsig-verify
Architecture: source
Version: 0.35
Distribution: unstable
Urgency: medium
Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org>
Changed-By: Guillem Jover <guillem@debian.org>
Closes: 1148191
Changes:
 debsig-verify (0.35) unstable; urgency=medium
 .
   * Update for new libdpkg-dev >= 1.23.8 API changes. Closes: #1148191
   * Build system:
     - Set TAR_OPTIONS to avoid leaking maintainer information on dist.
   * Packaging:
     - Switch to Standards-Version 4.7.4 (no changes needed).
     - Update lintian overrides.
Checksums-Sha1:
 aba006d22ef36a0ca9ec2192589815802506e525 2256 debsig-verify_0.35.dsc
 77d44becfd832f35ad708816f5d370e787cd226e 132688 debsig-verify_0.35.tar.xz
 c8d12e7724ea2cdc8600dfef1a3861980666725a 6425 debsig-verify_0.35_amd64.buildinfo
Checksums-Sha256:
 914834c1611a5f1d8659e705257e94e12d8c1230a337e0a51fdc7f54f366e004 2256 debsig-verify_0.35.dsc
 7c0c3fe50635e05f4885307deaf939f93ba8fd5086b9d824c06335b2fb130e84 132688 debsig-verify_0.35.tar.xz
 014f45eee1e9b992080215c11a0d16c933162281d0baa371c7e6df47382ba4a2 6425 debsig-verify_0.35_amd64.buildinfo
Files:
 5fc81262eb064fa9ff1905516f696ce7 2256 admin optional debsig-verify_0.35.dsc
 3f2698f6a633d87b3ad284bef64116e9 132688 admin optional debsig-verify_0.35.tar.xz
 d9a8adae6396262550c818826587b141 6425 admin optional debsig-verify_0.35_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=kIdM
-----END PGP SIGNATURE-----