Re: zlib

[Werner LEMBERG]

> On 3/31/22 11:15, Werner LEMBERG wrote:
>
>> - The internal 'zlib' code has been updated to be in sync with the
>>   current 'zlib' version (1.2.11).
>
> zlib 1.2.12 was released earlier this week

Sigh.  As mentioned on the 'freetype' list, I had checked zlib's git
archive five days ago, and there was no sign then that three days ago
a new version suddenly appeared...

> - fortunately, the security bug it fixed [1] was in the compression
> code, not decompression, so I would guess does not affect FreeType,
> but the changelog [2] does mention other bug fixes that might.
>
> [1] https://www.theregister.com/2022/03/30/zlib_data_bug/
> [2] https://www.zlib.net/ChangeLog.txt

Given that I screwed up the creation of `.pc` files with CMake
(already fixed in git), I will try to do a new FreeType release in
about a week, also checking whether I can easily update zlib (or
whether I have to ask David Turner for help :-)


    Werner