A new Debian Linux update has been published: DLA 3005-1: lrzip security update
A lrzip security update has been released for Debian GNU/Linux 9 LTS to address a heap memory corruption.Read more @ Linux Compatible