Forwarding from https://bugzilla.redhat.com/show_bug.cgi?id=1632206 :

Jason Tibbitts 2018-09-24 18:39:22 CEST wrote:

Seems the new minizip lacks the unztell() function so more than a rebuild is required. I could conceivably do a port to the new minizip or to some other library, but this would all be to avoid the use of a single unzip.c source file that's already part of the source.

So I've just reverted to using the bundled bit. It's not called on untrusted data so it shouldn't be particularly problematic.