-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 23:22:00 +0200
Source: lrzsz
Binary: lrzsz
Architecture: armel
Version: 0.12.21rc-0.2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: armel Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 lrzsz      - Tools for zmodem/xmodem/ymodem file transfer
Changes:
 lrzsz (0.12.21rc-0.2+deb13u1) trixie; urgency=medium
 .
   * CVE-2026-105840, 01-rz-reject-absolute-paths.diff:
     reject sender-supplied absolute paths in rz restricted mode.
   * CVE-2026-105842, 02-rz-terminate-received-strings.diff:
     reject over-length received file names,
     fixing an out-of-bounds read and a one-byte heap overwrite on
     maximum-length ZFILE names; also terminate the receiver buffer.
Checksums-Sha1:
 5938ee841efc556e9afb58ab4e2ac066096e2b3d 5556 lrzsz_0.12.21rc-0.2+deb13u1_armel-buildd.buildinfo
 7a2c744f6af24858c99515d3d026f658206a8f6b 82516 lrzsz_0.12.21rc-0.2+deb13u1_armel.deb
Checksums-Sha256:
 cc65e034d18d1bb63bcd1fc753f1ad495f87a670b99c953402964ace8aee4486 5556 lrzsz_0.12.21rc-0.2+deb13u1_armel-buildd.buildinfo
 c7bbeed1d1c5ba03a25a965497241c6ee3f42e5d82fee642869739fa9a371fa3 82516 lrzsz_0.12.21rc-0.2+deb13u1_armel.deb
Files:
 9dc3671e8546c43aa2743533bbf36b00 5556 comm optional lrzsz_0.12.21rc-0.2+deb13u1_armel-buildd.buildinfo
 c989d80b7b5456b8ec8d096af716cbd9 82516 comm optional lrzsz_0.12.21rc-0.2+deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=Z/Ib
-----END PGP SIGNATURE-----