ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

ZipStreamReader::extract applies Unix permissions through extracted symlinks without validating the symlink target stays within the destination For further details see: https://github.com/zip-rs/zip2/security/advisories/GHSA-4684-h2q9-2vcp...