-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 11 Oct 2026 23:22:00 +0200 Source: lrzsz Binary: lrzsz Architecture: s390x Version: 0.12.21rc-0.2+deb13u1 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Bastian Germann Description: lrzsz - Tools for zmodem/xmodem/ymodem file transfer Changes: lrzsz (0.12.21rc-0.2+deb13u1) trixie; urgency=medium . * CVE-2026-105840, 01-rz-reject-absolute-paths.diff: reject sender-supplied absolute paths in rz restricted mode. * CVE-2026-105842, 02-rz-terminate-received-strings.diff: reject over-length received file names, fixing an out-of-bounds read and a one-byte heap overwrite on maximum-length ZFILE names; also terminate the receiver buffer. Checksums-Sha1: cc52dd641ff4d522f94814ceb8d49f14f39a4c9a 5566 lrzsz_0.12.21rc-0.2+deb13u1_s390x-buildd.buildinfo 213c67a56013b54db84d5f1f3af7646c8856a159 84192 lrzsz_0.12.21rc-0.2+deb13u1_s390x.deb Checksums-Sha256: 4bd9a86282f42ae790c23fae9716253744dd4429af5a1ec6b8046886649e7d4b 5566 lrzsz_0.12.21rc-0.2+deb13u1_s390x-buildd.buildinfo 7eca32f15fbbc78c895d85317ff52d1f48445dfad55507d0ff6d3fe2184cc2b7 84192 lrzsz_0.12.21rc-0.2+deb13u1_s390x.deb Files: b5dbbaa30803cadc8c8f77c503d32245 5566 comm optional lrzsz_0.12.21rc-0.2+deb13u1_s390x-buildd.buildinfo 45b1f503fc6f781ef4f3b73f67f633c4 84192 comm optional lrzsz_0.12.21rc-0.2+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmrwkfMACgkQMWUFebkH noSUORAAnIgXyhR+a3MSJWvL7lnumRn+fqLRZ+NhqRBi0tzlEf6eozEhzGr0HsFN 2SLMNRXg9ys8GBQT9vkxcYglSjACleYAp+5z4G5OYlinbMLRNYV2ZYtHua+LPY9w uhriGduYOC1j1diAFEtF41ZHRVqMorIxJJi2yqKYp2L7z93XICoXxFAhRJblrWmI Vxa/Afj0/o1J7fDTmkis89QFnOB+UQsj3d62liK6vkCq18Dj3pAscZf4sD8SIN1v e8D4gpZdClCCZbpgflfhPc0weJn38iXP5nhb73Jx4k01F9Fo8bdyiEkEdxBTuIot M2hsZbH5RzTi/awTgobIIfa4wJnYLRTxMGTIt9JhLV85FJVaLciYAx8kWwWUMHLZ tFtLJR+HhVkLT1HGZAD7vS4KgI+R2AgTpOWugKZVbm1kDEcEnXYnnP3a81RBNcbb gwHrNIozT9B7w8eE6bFvlppZucaf0HVz9yhqgX6HOiH8KEVXgdUjuAPGUBHVmEHa /JobBLL+FgRVsrpExQfrCCnHAOzFHdyZcWT8qMzTRtftCi1rbaSurvoaEWGyWo4U /E2E3P8lbk3EU7nMNTI5AiEal0eIEDC05GBxnK4jq8JXpa5tiQDJ+VKMW5weDHJ1 smhF/WemPVD3djLcZCoV2RMXsScikWavzl/2m5Qmze5PFHs+0zU= =vO44 -----END PGP SIGNATURE-----