Package: rar Severity: important Version: 2:6.11-0.1 X-Debbugs-Cc: t...@security.debian.org
The whatsnew file says for Version 6.12: 1. Security vulnerability allowing to create unpacked files outside of destination directory is fixed. This issue exists in Unix RAR only and doesn't affect WinRAR and Android RAR. So please import the new version.