-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Oct 2026 07:04:50 +0200 Source: lrzsz Architecture: source Version: 0.13.1-1 Distribution: unstable Urgency: medium Maintainer: Martin A. Godisch <godisch@debian.org> Changed-By: Martin A. Godisch <godisch@debian.org> Closes: 1150240 Changes: lrzsz (0.13.1-1) unstable; urgency=medium . * New upstream release, fixes CVE-2026-105840, CVE-2026-105841 and CVE-2026-105842, closes: #1150240. * Added debian/NEWS about options and features removed upstream. * Dropped almost all Debian patches that are now included upstream or no longer apply to the new code base. * Dropped DSZLOG support patch, see debian/NEWS. * Updated 02-rz-terminate-received-strings.diff: enlarge the receive buffer by one byte and clear it once after allocation, since a sender-supplied name that fills the whole subpacket has no NUL of its own, and the attribute parsing would otherwise start one byte past the buffer. Dropped its PATH_MAX length check, which is no longer needed. * Added lsz_manpage_default_typo.diff. * Dropped stale README.cvs. * Switched to debhelper compat level 14. * Switched debian/rules to a minimal dh rules file. * Dropped Priority and Rules-Requires-Root from debian/control. * Updated build-dependencies for upstream quickcheck test suite. * Converted debian/copyright to machine-readable format. * Added debian/upstream/metadata. * Updated watch file. Checksums-Sha1: 7560385519be18a5b7e58947f7aed117068a72aa 1896 lrzsz_0.13.1-1.dsc 4fdefa37c39e6f41f9192924d119e1f8967f477f 483782 lrzsz_0.13.1.orig.tar.gz 38dad7103525887f9ce5cd1c2bc4b21f3f4d3455 10520 lrzsz_0.13.1-1.debian.tar.xz e54902d2132d0dbf12d918cd760e605293d75bc7 5923 lrzsz_0.13.1-1_amd64.buildinfo Checksums-Sha256: 101aa555a422751d190e20183e13d66573c6a7f2856f7c6ac07f7ddd47d5fd4e 1896 lrzsz_0.13.1-1.dsc 112f91059fbd118e016d800c1a5c5a1702e965d8b9bfbda6015e44e20bfb93c9 483782 lrzsz_0.13.1.orig.tar.gz 0cede4418e5c3a2a0043f74913564fa366812c7479764c33351db7e08d762a8f 10520 lrzsz_0.13.1-1.debian.tar.xz a066eb8fd05901770904f69878d9b8f399f7ded060181c14de5ca066508875f6 5923 lrzsz_0.13.1-1_amd64.buildinfo Files: 3b76bc5e19751cf639bc97207407142b 1896 comm optional lrzsz_0.13.1-1.dsc 5a4c4e4053512eb8a17bc2db73fec337 483782 comm optional lrzsz_0.13.1.orig.tar.gz 1799174e05de5c11e477b696229889d3 10520 comm optional lrzsz_0.13.1-1.debian.tar.xz 98127ceded92770fadf90715f8389b04 5923 comm optional lrzsz_0.13.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEEGEIyO0/Pm5CZX6F/o1C5kfBaSFcFAmrNvL4THGdvZGlzY2hA ZGViaWFuLm9yZwAKCRCjULmR8FpIV05LD/42Ie2FWm9RzOWqFsjdYz23xd0rAkSb NGBVwgkr3GAEwhwg7umKbgEJjHQ1BC19IeIQxI9Ll6M+uZOp4HT060qA/QPRKtJx AXCzyQm+HJXQAioWhLc+0EsC9NxtaO+PcwT7KaAytoZ9pHfSKX+R7IAp7sZqMiAS 6r8gNv/Rz+Y9KTeruAy+X8AM0wxDYEDvvcIza5enni1C0eUZpHk/C0hySpPvlswR Xdi5YIz+sO5Qx46zOw3E8qpMte5w+gCptfeG/kM9MeF924icUyxnmIfhNtERHafj dILuuaKWntbZYIW0Dk9z4asuCySi1rG7bRgLMsoLtd+Ug4BAsWsQ8jbY8SqIYKh7 fyuC+8JCUlFN3iwp06OqHGLZfHH12j0WNICKJMiswU5sJtd+S+OFzLr+GaQP1LiJ 5OO6/j3VQcRzgyB5hwcRQ4RvE63IkORmR2Fq6EBopnR3uxqfcXGrJWuGn7bCExhZ v8Vf7B7ZAeHhy6WnkHGGXme/nzeNVU7aRWocIyllbV6K5wIR2FbPAOLUVNQAouc/ BTB52fKyd6CbyTZJHv2M+kQlM/BSQGmCuV0dD2B6nD/nydfojxumaL/j/75Na4vh f7EOTYkrFuoECOvyWyPAdQTj3YV+tQuH4V5Bx6BaEVGQErOQcz2AbEiuQJy8RgcU sPjy7/ulYxCiXw== =cMWH -----END PGP SIGNATURE-----
