AZL-6936 CVE-2014-9636 affecting package unzip for versions less than 6.0-19
unzip 6.0 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression...