unzip -- input sanitization errors

oCERT reports:

The UnZip tool is an open source extraction utility for archives
compressed in the zip format.
The unzip command line tool is affected by heap-based buffer
overflows within the CRC32 verification, the test_compr_eb() and
the getZip64Data() functions. The input errors may result in
arbitrary code execution.
A specially crafted zip file, passed to unzip -t, can be used to
trigger the vulnerability.