unzip -- multiple vulnerabilities

Gustavo Grieco reports:

Two issues were found in unzip 6.0:

• A heap overflow triggered by unzipping a file with password
  (e.g unzip -p -P x sigsegv.zip).
• A denegation of service with a file that never finishes unzipping
  (e.g. unzip sigxcpu.zip).