Patches for two high-severity ZIP parsing flaws have quietly been available since July.