golang-github-cilium-ebpf - Debian Package Tracker

general

source: golang-github-cilium-ebpf (main)
version: 0.21.0+ds1-1
maintainer: Debian Go Packaging Team (DMD)
uploaders: Shengjing Zhu [DMD]
arch: all
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.2.0-1
oldstable: 0.9.1-1
stable: 0.11.0-2
testing: 0.17.3+ds1-4
unstable: 0.21.0+ds1-1

versioned links

0.2.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.11.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.17.3+ds1-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.21.0+ds1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

golang-github-cilium-ebpf-dev

action needed

A new upstream version is available: 0.22.0 high

A new upstream version 0.22.0 is available, you should consider packaging it.

Created: 2026-06-28 Last update: 2026-07-15 16:00

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-10722: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.

Created: 2026-06-06 Last update: 2026-06-16 16:00

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-10722: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.

Created: 2026-06-06 Last update: 2026-06-16 16:00

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2026-06-21 Last update: 2026-07-15 21:31

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit e7e63995e10e266dfbe730b7140e414d4326f820
Merge: a9fe863 375de4e
Author: Andrew Lee (李健秋) <ajqlee@debian.org>
Date:   Tue Jun 16 10:12:02 2026 +0200

    Merge branch 'debian/sid' into 'debian/sid'
    
    Update packaging for new upstream version 0.21.0
    
    See merge request go-team/packages/golang-github-cilium-ebpf!4

Created: 2026-06-16 Last update: 2026-07-12 04:50

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2025-09-20 Last update: 2025-09-20 22:31

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2026-10722: (needs triaging) A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-06-06 Last update: 2026-06-16 16:00

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2026-10722: (needs triaging) A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-06-06 Last update: 2026-06-16 16:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-06-16 18:02

testing migrations

excuses:
- Migration status for golang-github-cilium-ebpf (0.17.3+ds1-4 to 0.21.0+ds1-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Autopkgtest for golang-github-cilium-ebpf/0.21.0+ds1-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, loong64: Pass, ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ Autopkgtest for pwru/1.0.5+ds1-3: amd64: Regression ♻ (reference ♻), arm64: Regression ♻ (reference ♻), i386: Regression ♻ (reference ♻)
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/g/golang-github-cilium-ebpf.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- ∙ ∙ 30 days old (needed 5 days)
- Not considered

news

[rss feed]

[2026-06-16] Accepted golang-github-cilium-ebpf 0.21.0+ds1-1 (source) into unstable (Juan Manuel Mendez Rey) (signed by: 李健秋 Andrew Lee)
[2025-09-25] golang-github-cilium-ebpf 0.17.3+ds1-4 MIGRATED to testing (Debian testing watch)
[2025-09-25] golang-github-cilium-ebpf 0.17.3+ds1-4 MIGRATED to testing (Debian testing watch)
[2025-09-19] Accepted golang-github-cilium-ebpf 0.17.3+ds1-4 (source) into unstable (Reinhard Tartler)
[2025-09-19] Accepted golang-github-cilium-ebpf 0.17.3+ds1-3 (source) into unstable (Reinhard Tartler)
[2025-09-18] Accepted golang-github-cilium-ebpf 0.17.3+ds1-2 (source) into unstable (Reinhard Tartler)
[2025-08-24] Accepted golang-github-cilium-ebpf 0.17.3+ds1-1 (source) into experimental (Reinhard Tartler)
[2024-02-24] golang-github-cilium-ebpf 0.11.0-2 MIGRATED to testing (Debian testing watch)
[2024-02-22] Accepted golang-github-cilium-ebpf 0.11.0-2 (source) into unstable (Shengjing Zhu)
[2024-02-21] Accepted golang-github-cilium-ebpf 0.11.0-1 (source) into unstable (Shengjing Zhu)
[2022-08-23] golang-github-cilium-ebpf 0.9.1-1 MIGRATED to testing (Debian testing watch)
[2022-08-21] Accepted golang-github-cilium-ebpf 0.9.1-1 (source) into unstable (Shengjing Zhu)
[2021-11-20] golang-github-cilium-ebpf 0.7.0-1 MIGRATED to testing (Debian testing watch)
[2021-11-20] golang-github-cilium-ebpf 0.7.0-1 MIGRATED to testing (Debian testing watch)
[2021-11-17] Accepted golang-github-cilium-ebpf 0.7.0-1 (source) into unstable (Shengjing Zhu)
[2021-08-23] golang-github-cilium-ebpf 0.6.2-2 MIGRATED to testing (Debian testing watch)
[2021-08-20] Accepted golang-github-cilium-ebpf 0.6.2-2 (source) into unstable (Shengjing Zhu)
[2021-07-16] Accepted golang-github-cilium-ebpf 0.6.2-1 (source) into experimental (Shengjing Zhu)
[2021-06-22] Accepted golang-github-cilium-ebpf 0.6.1-1 (source) into experimental (Shengjing Zhu)
[2020-11-22] golang-github-cilium-ebpf 0.2.0-1 MIGRATED to testing (Debian testing watch)
[2020-11-19] Accepted golang-github-cilium-ebpf 0.2.0-1 (source) into unstable (Shengjing Zhu)
[2020-11-16] golang-github-cilium-ebpf 0.1.0-1 MIGRATED to testing (Debian testing watch)
[2020-11-14] Accepted golang-github-cilium-ebpf 0.1.0-1 (source) into unstable (Shengjing Zhu)
[2020-08-21] golang-github-cilium-ebpf 0.0~git20200810.c7f1234-1 MIGRATED to testing (Debian testing watch)
[2020-08-18] Accepted golang-github-cilium-ebpf 0.0~git20200810.c7f1234-1 (source) into unstable (Shengjing Zhu)
[2020-04-22] golang-github-cilium-ebpf 0.0~git20200413.48fb86d-2 MIGRATED to testing (Debian testing watch)
[2020-04-18] Accepted golang-github-cilium-ebpf 0.0~git20200413.48fb86d-2 (source) into unstable (Shengjing Zhu)
[2020-04-18] Accepted golang-github-cilium-ebpf 0.0~git20200413.48fb86d-1 (source all) into unstable, unstable (Debian FTP Masters) (signed by: Shengjing Zhu)

bugs [bug history graph]

all: 3
RC: 0
I&N: 1
M&W: 2
F&P: 0
patch: 0

links

homepage
lintian (0, 2)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.21.0+ds1-1