Apply a bunch of CVE and other fixes for unzip from debian and redhat bug tracker. Add the links to the patch files. The fix for CVE-2014-9636 was improved.