CLSA-2026-1792053113

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792053113.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792053113
Upstream
CVE (3)
  • CVE-2026-105840
  • CVE-2026-105841
  • CVE-2026-105842
Published
2026-10-15T08:32:03Z
Modified
2026-10-26T09:30:39Z
Summary
lrzsz: Fix of 3 CVEs
Details
  • CVE-2026-105840: lrz: reject absolute and escaping paths in restricted mode
  • CVE-2026-105841: lrz: remove piping received files to a shell command
  • CVE-2026-105842: lrz: terminate received data and bound file name length
References

Affected packages

TuxCare:AlmaLinux:9.2 / lrzsz

Package

Name
lrzsz
Purl
pkg:rpm/tuxcare/lrzsz?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.12.20-55.el9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792053113.json"