-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 23:22:00 +0200
Source: lrzsz
Binary: lrzsz
Architecture: amd64
Version: 0.12.21rc-0.2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 lrzsz      - Tools for zmodem/xmodem/ymodem file transfer
Changes:
 lrzsz (0.12.21rc-0.2+deb13u1) trixie; urgency=medium
 .
   * CVE-2026-105840, 01-rz-reject-absolute-paths.diff:
     reject sender-supplied absolute paths in rz restricted mode.
   * CVE-2026-105842, 02-rz-terminate-received-strings.diff:
     reject over-length received file names,
     fixing an out-of-bounds read and a one-byte heap overwrite on
     maximum-length ZFILE names; also terminate the receiver buffer.
Checksums-Sha1:
 f45ac3ae078c27dfeb43b0498497b69eb541b9a7 5704 lrzsz_0.12.21rc-0.2+deb13u1_amd64-buildd.buildinfo
 877ed3e954a344e6b341d66c902d9135c7188deb 84992 lrzsz_0.12.21rc-0.2+deb13u1_amd64.deb
Checksums-Sha256:
 73a443339baf4458728945c273eeff978ee3b1a6242cddbbcf6138340e343521 5704 lrzsz_0.12.21rc-0.2+deb13u1_amd64-buildd.buildinfo
 52cb55e2dfba78dacefaac2e9595c033c65d1b3ed290eaa4a93e0e149265caf9 84992 lrzsz_0.12.21rc-0.2+deb13u1_amd64.deb
Files:
 68f0161c260708dd8d345114782607ff 5704 comm optional lrzsz_0.12.21rc-0.2+deb13u1_amd64-buildd.buildinfo
 d3ac79f21052ec94d79168c620ab0133 84992 comm optional lrzsz_0.12.21rc-0.2+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=ddHn
-----END PGP SIGNATURE-----