CVE-2018-17093

An issue has been discovered in mackyle xar 1.6.1. There is a NULL pointer dereference in xar_get_path in lib/util.c.

Source: CVE-2018-17093