Release date:
2026-10-15 08:32:03 UTC
Description:
- CVE-2026-105840: lrz: reject absolute and escaping paths in restricted mode
- CVE-2026-105841: lrz: remove piping received files to a shell command
- CVE-2026-105842: lrz: terminate received data and bound file name length
Updated packages:
-
lrzsz-0.12.20-55.el9.tuxcare.els1.aarch64.rpm
sha:cc3a3433472a25b57cf9d4362fa8ea9b0d37d1a6fcfef7acd47c5bb0ca887c68
-
lrzsz-0.12.20-55.el9.tuxcare.els1.i686.rpm
sha:4ac415c1e937fdc62221d0b54c420ce83e0bca7c47ac2efb71926ea15caba2ef
-
lrzsz-0.12.20-55.el9.tuxcare.els1.x86_64.rpm
sha:2222729163518a1d85318b1cdc6841a3d1895b60b69ed15bf0a5590c67ea7be6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
