Debian Security Advisory DSA 1012-1 - A buffer overflow in the command line argument parsing has been discovered in unzip, the de-archiver for ZIP files that could lead to the execution of arbitrary code.
152b98431a209cefd9f94464eb3e26576d778b0f8d48635b5a6c9cd131c17cd4