#575 Can Zlib be upgraded to 1.2.13 or newer to resolve security vulnerabilities?

[IChunLin]

Hi,
The Latest version of Zlib is 1.2.11 in https://nsis.sourceforge.io/Zlib, but we will encounter security vulnerabilities, such as:
https://github.com/google/or-tools/issues/3821

Is it possibleto provide an newer zlib package? Thank you very much.

Best Regards,
Wendy

[Anders]

It would be nice to upgrade at some point yes but it is probably not a security issue for us since the installer only unpacks data we compressed.

Passing untrusted .zip files to zip2exe might cause issues on the developers machine but you should not be doing that anyway.