CVE-2022-28044

lrzip contains a heap memory corruption in lrzip.c:initialise_control (CVE-2022-28044). The vulnerability affects lrzip memory handling and pointer/memory allocation logic, with Debian and Ubuntu advisories noting potential denial of service and, in some contexts, arbitrary code execution. Public...