Version 1.3.2 has these key updates from 1.3.1: - Address findings of the [7ASecurity audit](https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/) of zlib. - [ ] Check for negative lengths in crc32_combine functions. - [ ] Copy only the initialized window contents in inflateCopy. - [ ] Prevent the use of insecure functions without an explicit request. - [ ] Add compressBound_z and deflateBound_z functions for large values. - [ ] Use atomics to build inflate fixed tables once. - [ ] Add --undefined option to ./configure for UBSan checker. - [ ] Copy only the initialized deflate state in deflateCopy. - [ ] Zero inflate state on allocation. - [ ] Add compress_z and uncompress_z functions. - Complete rewrite of cmake support. - Remove untgz from contrib. - Vectorize the CRC-32 calculation on the s390x. - Remove vstudio projects in lieu of cmake-generated projects. - Add zipAlreadyThere() to minizip zip.c to help avoid duplicates. - Add deflateUsed() function to get the used bits in the last byte. - Fix bug in inflatePrime() for 16-bit ints. - Add a "G" option to force gzip, disabling transparency in gzread(). - Return all available uncompressed data on error in gzread.c. - Support non-blocking devices in the gz* routines.
Version 1.3.2 has these key updates from 1.3.1: