As in zlib 1.2.13 / 1.3.0 many security issues are fixed , we want to use zlib 1.2.13 instead of the old version we are using with gnupg , So we want to confirm whether Zlib 1.2.13 / 1.3.0 is compatiable with gpg2.2.19 ?
Iām not able to answer the question if those versions of zlib and gpg are compatible. Is gpg your only application that is using zlib? At least it was confirmed that gpg is not affected by the security issues that where fixed in zlib 1.2.13.
Hi!
In our Windows builds we currently use a stripped down version of zlib
1.2.12. This is not affected by security bugs which might be found in
tools belonging to 1.2.12.
zlib has for more than 2 decades a stable API and thus you may use any
recent version of zlib to build GnuPG. Anything which is available on
your Unix platform will work. If you want to use the version we use
on Windows, you may want to use the speedo make system as described in
the README.
Please remember that gnupg 2.2 will reach end-of-life in 2 months and
thus you should soon switch to the stable version 2.4.
Shalom-Salam,
Werner
1 Like