-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 23:22:00 +0200
Source: lrzsz
Binary: lrzsz
Architecture: riscv64
Version: 0.12.21rc-0.2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-manda-04) <buildd_riscv64-rv-manda-04@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 lrzsz      - Tools for zmodem/xmodem/ymodem file transfer
Changes:
 lrzsz (0.12.21rc-0.2+deb13u1) trixie; urgency=medium
 .
   * CVE-2026-105840, 01-rz-reject-absolute-paths.diff:
     reject sender-supplied absolute paths in rz restricted mode.
   * CVE-2026-105842, 02-rz-terminate-received-strings.diff:
     reject over-length received file names,
     fixing an out-of-bounds read and a one-byte heap overwrite on
     maximum-length ZFILE names; also terminate the receiver buffer.
Checksums-Sha1:
 241629296ed4b013e169581287c9391c2e92ab10 5642 lrzsz_0.12.21rc-0.2+deb13u1_riscv64-buildd.buildinfo
 3c6b08ff31d5ae9cf300b6cf3bafe940f543a093 83612 lrzsz_0.12.21rc-0.2+deb13u1_riscv64.deb
Checksums-Sha256:
 e0bba55805feb1c2e38f155f746ca0b2d04065d2bc3e8f3f0154392fccb9797b 5642 lrzsz_0.12.21rc-0.2+deb13u1_riscv64-buildd.buildinfo
 1c3a047b553611ee9bbfbaebe1a86f2075489c1bc98d6cb49aae1e8e94cde47e 83612 lrzsz_0.12.21rc-0.2+deb13u1_riscv64.deb
Files:
 a8acee7ee6868134e7bac6d2a957dc6b 5642 comm optional lrzsz_0.12.21rc-0.2+deb13u1_riscv64-buildd.buildinfo
 cc2071de6185c35d3d818e2d20e0a7f1 83612 comm optional lrzsz_0.12.21rc-0.2+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=r6xL
-----END PGP SIGNATURE-----