4 versions of rage are listed here, from July 23, 2024 to the current 0.12.1. Each one links to the publisher’s own installer files.
4 versions over 2 years · about 2 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 0.12.1Latest | July 14, 2026 | — | 64-bit ZIP Release notes## rage
### Fixed
Armored files that contain an empty final line are now correctly rejected.
## age
### Fixed
`age::armor::ArmoredReader`:
- It now correctly implements the intended strict parsing profile (initially implemented in 0.9.0) by rejecting an empty final line.
- The async API now correctly rejects some classes of truncated files that previously would cause it to hang. |
| 0.11.2 | April 22, 2026 | — | 64-bit ZIP Release notesChanged
- Recipient and identity files are now limited to at most 16 MiB, and SSH keys are now limited to at most 16 kiB, matching the Go implementation.
Fixed
- Plugin encryption and decryption no longer panic when a plugin sends certain invalid responses.
- Decryption with an encrypted SSH key no longer panics when given an empty passphrase. |
| 0.11.1 | December 18, 2024 | — | 64-bit ZIP Release notesSecurity
Fixed a security vulnerability that could allow an attacker to execute an arbitrary binary under certain conditions. See GHSA-4fg7-vxc8-qx5w. Plugin names are now required to only contain alphanumeric characters or the four special characters +-._. Thanks to ⬡-49016 for reporting this issue. |
| v0.10.0 | July 23, 2024 | — | 64-bit ZIP |
