Lrzsz is a modified zmodem/ymodem/xmodem package for Linux systems. A security update addresses an arbitrary file overwrite vulnerability via absolute path traversal in restricted mode (CVE-2026-105840). This update also fixes an arbitrary command execution vulnerability via crafted file names in pipe mode (CVE-2026-105841) and resolves a segfault issue. The vulnerabilities affect versions prior to 0.12.20-58.el9_8.