These patches fix some security and other issues:
- ( 7) zipnote.c: Close in_file instead of undefined file x
- ( 8) Use format specifier %s to print strings, not the string itself
- (14) Fix buffer overflow when filename contains unicode characters
- (15) Fix buffer overflow when using '-T -TT'
- (16) Fix symlink update detection
Obtained from: https://salsa.debian.org/sanvila/zip
Reported by: diizzy
Reviewed by: diizzy
Security: CVE-2018-13410
MFH: 2026Q1
Robert Clausecker
e0e704bfea