[SECURITY] [DSA 1012-1] New unzip packages fix arbitrary code execution

["Thomas Wilke" <wilke@ti.informatik.uni-kiel.de>]

Dear Luca:

I was wrong: In their 2004 paper, Bouyer, Brinksma, and Larsen say that they
would like to see an extension of their result to a setting with
adversaries. Now the question is what kind of adversary were they thinking
of. Well, they refer to the 2004 paper by Alur, Bernadsky, and Madhusudan. And
in that paper, the timed game version you mention in your report is used
rather than the one that is used in the submission. 

Thanks for replying promptly and making that clear to me! The submission
deserves exactly what you suggest (although it is a pity in view of the first
part, no?).

Best regards,
Thomas