-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 23:22:00 +0200
Source: lrzsz
Binary: lrzsz
Architecture: i386
Version: 0.12.21rc-0.2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 lrzsz      - Tools for zmodem/xmodem/ymodem file transfer
Changes:
 lrzsz (0.12.21rc-0.2+deb13u1) trixie; urgency=medium
 .
   * CVE-2026-105840, 01-rz-reject-absolute-paths.diff:
     reject sender-supplied absolute paths in rz restricted mode.
   * CVE-2026-105842, 02-rz-terminate-received-strings.diff:
     reject over-length received file names,
     fixing an out-of-bounds read and a one-byte heap overwrite on
     maximum-length ZFILE names; also terminate the receiver buffer.
Checksums-Sha1:
 f2870d5e37c3d25cffec6ee665ee5b9d1aae33ae 5608 lrzsz_0.12.21rc-0.2+deb13u1_i386-buildd.buildinfo
 fc58495450681de80bd84622b6895f794c73fc5e 84196 lrzsz_0.12.21rc-0.2+deb13u1_i386.deb
Checksums-Sha256:
 861a0cabb6ed209f8b82268544959f1c772fea762d06bffa5ccd8f328089977f 5608 lrzsz_0.12.21rc-0.2+deb13u1_i386-buildd.buildinfo
 47144c61db8e387cd1733fa7df4e0768f2384d8ac3b245672b3d6b89c478929f 84196 lrzsz_0.12.21rc-0.2+deb13u1_i386.deb
Files:
 35dcd1c731c1c55ff48301ac8cf7f791 5608 comm optional lrzsz_0.12.21rc-0.2+deb13u1_i386-buildd.buildinfo
 7a95c5ceb833cd58d700e23d9be01c68 84196 comm optional lrzsz_0.12.21rc-0.2+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=EWQi
-----END PGP SIGNATURE-----