Zlib 1.4
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
zlib 1.4, released November 4, 2026 according to its GitHub release notes, bundles many security and bug fixes with several breaking changes. Fixes cover overflows in gzwrite() and inflateGetDictionary(), plus path-traversal and Zip64 parsing flaws in minizip. Builders should note renamed MSVC libraries, CMake 3.15 as the minimum, z_off_t back to long, and changed deflateReset() behavior. contrib/iostream2 is flagged unsafe on untrusted input. The CVE details and maintainers' severity comments could not be independently verified.