Info-Zip's zip binary version 3.0-11 may suffer from an off by one vulnerability.
adb14ffcde2c0e08e3a4d30a3f680313d891be018271aa345ef21946a3e9e677
Debian Linux Security Advisory 5202-1 - Sandipan Roy discovered two vulnerabilities in InfoZIP's unzip program, a de-archiver for .zip files, which could result in denial of service or potentially the execution of arbitrary code.
36556aef4d8ee1ea1bca8e75235ed57c9ee83212074eb61d50252bb122797595
Slackware Security Advisory - New infozip packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
2d88d00368cf8928d96abd2e9bbc2443f1a829890ef6abcd2773ac66b75c08a3
InfoZip UnZip versions 6.00 and below and 6.1c22 and below suffer from multiple buffer overflow vulnerabilities.
dac731d2690cb1af2ab661aed3d50c9247b02e31917bc2d087907958bbe12e5e