LinuxSecurity.com: A double free vulnerability discovered in UnZip might lead to the execution of arbitrary code.
More...