ask for more validation from libzip (no apparent change in behavior but seems like a good idea)
pull libzip from http://hg.nih.at/libzip/rev/49c17f2a37bc - fixes #36 and fixes #33