Описание
ELSA-2026-86056: lrzsz security, bug fix, and enhancement update (IMPORTANT)
[0.12.20-69]
- Fix long-standing SIGSEGV bug when using the -s parameter without an argument (RHEL-282106)
[0.12.20-68]
- Backport tightened path handling from 0.13.1 (CVE-2026-105840)
[0.12.20-67]
- Remove 'Topipe' feature. (CVE-2026-105841)
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
lrzsz
0.12.20-69.el10_2
Oracle Linux x86_64
lrzsz
0.12.20-69.el10_2
Связанные CVE
Связанные уязвимости
ELSA-2026-83525: lrzsz security, bug fix, and enhancement update (IMPORTANT)
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user.
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user.