-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 23:22:00 +0200
Source: lrzsz
Architecture: source
Version: 0.12.21rc-0.2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Martin A. Godisch <godisch@debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Changes:
 lrzsz (0.12.21rc-0.2+deb13u1) trixie; urgency=medium
 .
   * CVE-2026-105840, 01-rz-reject-absolute-paths.diff:
     reject sender-supplied absolute paths in rz restricted mode.
   * CVE-2026-105842, 02-rz-terminate-received-strings.diff:
     reject over-length received file names,
     fixing an out-of-bounds read and a one-byte heap overwrite on
     maximum-length ZFILE names; also terminate the receiver buffer.
Checksums-Sha1:
 27ffabc568641b554979cca2960bcb084379f0b6 1626 lrzsz_0.12.21rc-0.2+deb13u1.dsc
 e43ff99c901f3e1bf80f01212163996eaf9d15fd 17904 lrzsz_0.12.21rc-0.2+deb13u1.debian.tar.xz
 d3ec074a549fbe4edb50ace7fcae6ac947729108 5577 lrzsz_0.12.21rc-0.2+deb13u1_source.buildinfo
Checksums-Sha256:
 6bfe4d76b85df8bb54568befa7680d21e2be6d746fbe504878bf26640997d6e7 1626 lrzsz_0.12.21rc-0.2+deb13u1.dsc
 60a6167a4ad1475d4417ebae3fbad0200603ecfbe502d9858093eaff3016b7b6 17904 lrzsz_0.12.21rc-0.2+deb13u1.debian.tar.xz
 9485a5c31f8c00a84b2deb66189dc4488e45602b108c2e56518f4d5971b131c6 5577 lrzsz_0.12.21rc-0.2+deb13u1_source.buildinfo
Files:
 0647e81bf7b7a3242d6b31a1e9829043 1626 comm optional lrzsz_0.12.21rc-0.2+deb13u1.dsc
 93f3df945e8861deed72a55275990103 17904 comm optional lrzsz_0.12.21rc-0.2+deb13u1.debian.tar.xz
 7e5af261e82d56ad9504e0138cca53fb 5577 comm optional lrzsz_0.12.21rc-0.2+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Gdmd
-----END PGP SIGNATURE-----