CVE-2018-14329: Improper Link Resolution Before File Access

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...