CVE-2018-20999

An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.