Sync updates from Debian BUster
unzip (6.0-23+deb10u2) buster; urgency=medium
- Two more patches from Mark Adler for CVE-2019-13232. Closes: #963996.
- Fix bug in UZbunzip2() that incorrectly updated G.incnt.
- Fix bug in UZinflate() that incorrectly updated G.incnt.