[Bug 1108596] VUL-1: CVE-2018-17094: xar: An issue has been discovered in mackyle xar 1.6.1. There is a NULL pointerdereference in xar_unserialize in lib/archive.c.