It would seem that Cygwin is using a somewhat old version of Info-ZIP from which zip and unzip are created. The info-zip.org
>From the http://info-zip.org/ site, there is: """ All known vulnerabilities are fixed in Zip 2.32. """ However, it appears that Cygwin is using version 3.0. What is the process to get this updated? Please advise. Thanks.