Debian Package Tracker
Register | Log in
Subscribe

golang-github-nwaples-rardecode

reading RAR archives (Go library)

Choose email to subscribe with

general
  • source: golang-github-nwaples-rardecode (main)
  • version: 2.2.1-1
  • maintainer: Daniel Baumann (DMD)
  • arch: all
  • std-ver: 4.7.2
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • testing: 2.1.1-2
  • unstable: 2.2.1-1
versioned links
  • 2.1.1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.2.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • golang-github-nwaples-rardecode-dev
action needed
1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:
  • CVE-2025-11579: github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.
Created: 2025-10-12 Last update: 2025-10-14 06:31
testing migrations
  • excuses:
    • Migration status for golang-github-nwaples-rardecode (2.1.1-2 to 2.2.1-1): Waiting for test results or another package, or too young (no action required now - check later)
    • Issues preventing migration:
    • ∙ ∙ Too young, only 1 of 2 days old
    • Additional info:
    • ∙ ∙ Updating golang-github-nwaples-rardecode will fix bugs in testing: #1117936
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/g/golang-github-nwaples-rardecode.html
    • ∙ ∙ autopkgtest for golang-github-nwaples-rardecode/2.2.1-1: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Pass
    • ∙ ∙ Reproducible on amd64 - info ♻
    • ∙ ∙ Waiting for reproducibility test results on arm64 - info ♻
    • ∙ ∙ Required age reduced by 3 days because of autopkgtest
    • Not considered
news
[rss feed]
  • [2025-10-13] Accepted golang-github-nwaples-rardecode 2.2.1-1 (source) into unstable (Daniel Baumann)
  • [2025-08-13] golang-github-nwaples-rardecode 2.1.1-2 MIGRATED to testing (Debian testing watch)
  • [2025-05-27] Accepted golang-github-nwaples-rardecode 2.1.1-2 (source) into unstable (Daniel Baumann)
  • [2025-05-26] Accepted golang-github-nwaples-rardecode 2.1.1-1 (source all) into unstable (Debian FTP Masters) (signed by: Daniel Baumann)
bugs [bug history graph]
  • all: 0
links
  • homepage
  • lintian
  • buildd: logs, reproducibility
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 2.1.1-2

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing