-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 11 Oct 2026 23:22:00 +0200 Source: lrzsz Binary: lrzsz Architecture: armhf Version: 0.12.21rc-0.2+deb13u1 Distribution: trixie Urgency: medium Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Bastian Germann Description: lrzsz - Tools for zmodem/xmodem/ymodem file transfer Changes: lrzsz (0.12.21rc-0.2+deb13u1) trixie; urgency=medium . * CVE-2026-105840, 01-rz-reject-absolute-paths.diff: reject sender-supplied absolute paths in rz restricted mode. * CVE-2026-105842, 02-rz-terminate-received-strings.diff: reject over-length received file names, fixing an out-of-bounds read and a one-byte heap overwrite on maximum-length ZFILE names; also terminate the receiver buffer. Checksums-Sha1: edbe0fcae6a7ae72d44e8b4d680518462352ce81 5570 lrzsz_0.12.21rc-0.2+deb13u1_armhf-buildd.buildinfo a7b872ccbbd06eec838fe56f94b39ec4783d1eb3 82320 lrzsz_0.12.21rc-0.2+deb13u1_armhf.deb Checksums-Sha256: 9f303802e92f40fc29fda836c1053c23dbe4244e7cfcb74e46d0965ebd8f96b6 5570 lrzsz_0.12.21rc-0.2+deb13u1_armhf-buildd.buildinfo efbc8fed6924a628792c9d2723fa32ad29a1f5c0edd40acee9cccd5cee6a7bad 82320 lrzsz_0.12.21rc-0.2+deb13u1_armhf.deb Files: ba32dfc7f2ba719d789b6a83b22f7a57 5570 comm optional lrzsz_0.12.21rc-0.2+deb13u1_armhf-buildd.buildinfo 11efc79ddcfdfb66e9ac5a2e1749cec5 82320 comm optional lrzsz_0.12.21rc-0.2+deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEdK9iafpA71gaFfL5MLZgEo1cLWsFAmrwkoIACgkQMLZgEo1c LWselw/7B2dTeKKuNXub1Trj+JeP48Qwkpk7SY5cjnP6SEem0m1xuCSPK/pEVpY9 A5fupxQByYVEtW2LMaXeLBdZ+jO01wMDrP0Nm2ygctenYd9nq6HJxI7GswpZsRG5 36WH4JINtHDgH70x0PIBhBgLVI86Cmj8ilu9G6hTb7Xg09nidNbaWBGS7VXJndAc LE30Dr7zzdywDESeAgbTVqAJGnhQ7REhXwnB7bKHPxHeBAku3Qhs8e14rQO3pe60 K/wcrZ0fYbPZ6mYDZUSn73jgmb/zlxOgG/Zf1kAq8nWtEwyXSpG2uVdm5CCtypuy NrNpmVFNJJBxlqjGZNG5qKUXAK3uaqVZwOhDnBOzK89H4w4xEnJCm+mQ3J23IXgg wWn9qswco5rZtMsX26OfQt34jorn21dQViaLcXV9HjQPTqzSq4eZLwFRsgISiWax CiOK+uvpzJrVIjabYIpEgKqsbn0Ex6XDjFZYFEJmrCqgG5crBPwkOYdlwdfcqw30 iFHw2/PVPNLtgm7UhbMPEABYAKoFpBZc7OYU7BNCzB23hISY9YH3dq/N84dh+Z7s P/EEA8NEV1SoRCqpFAwauWGiKAEsIVOplx3bIr9sq3y9Jk9g/umptjn43Jw+AjSJ xsGMNt3cgPPx4/LORHQjSraQowinYUBwc6QNQaI+tNTlpf/+eXw= =n3bo -----END PGP SIGNATURE-----