[Bug 1091757] VUL-0: CVE-2018-10685: lrzip: There is a use-after-free in the lzma_decompress_buf function of stream.c, which allows remote attackers to cause a denial of service (application crash)