-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 23:22:00 +0200
Source: lrzsz
Binary: lrzsz
Architecture: arm64
Version: 0.12.21rc-0.2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 lrzsz      - Tools for zmodem/xmodem/ymodem file transfer
Changes:
 lrzsz (0.12.21rc-0.2+deb13u1) trixie; urgency=medium
 .
   * CVE-2026-105840, 01-rz-reject-absolute-paths.diff:
     reject sender-supplied absolute paths in rz restricted mode.
   * CVE-2026-105842, 02-rz-terminate-received-strings.diff:
     reject over-length received file names,
     fixing an out-of-bounds read and a one-byte heap overwrite on
     maximum-length ZFILE names; also terminate the receiver buffer.
Checksums-Sha1:
 3d2d6c7290ab4fccd89a6bfac871d8c6310ef8ff 5688 lrzsz_0.12.21rc-0.2+deb13u1_arm64-buildd.buildinfo
 3e253650cf953aaa85b23b8fe10f159e5175fcd9 80140 lrzsz_0.12.21rc-0.2+deb13u1_arm64.deb
Checksums-Sha256:
 8b79c126bd147185ea80c6db55fbffbfae1ee0e97081ad46623bca62d781d429 5688 lrzsz_0.12.21rc-0.2+deb13u1_arm64-buildd.buildinfo
 ac82350441421944b9c63ca62da01e1a8998265904780af38a62e68a831cc698 80140 lrzsz_0.12.21rc-0.2+deb13u1_arm64.deb
Files:
 00f3c0fe2c950bf545a3f306ee7ffdcd 5688 comm optional lrzsz_0.12.21rc-0.2+deb13u1_arm64-buildd.buildinfo
 fedc126fa8a108d8f6c1607161f05486 80140 comm optional lrzsz_0.12.21rc-0.2+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=XIo0
-----END PGP SIGNATURE-----