Version 1.3.1.2 is not a release

[madler]

I created and tagged a version 1.3.1.2 of zlib on the develop branch. It is not a release. Instead its purpose is to support a software audit being conducted. There will be a 1.3.2 release on the master branch after the audit completes and any necessary actions implemented.

[cjee21]

Hope #1132 is fixed before 1.3.2 release.

[Neustradamus]

@madler: Please do not tag a not real release.

Linked to:

• Release Notes and assets are missing in v1.3.1.2 #1133
• No 1.3.1.2 release tarball? #1131
• Version 1.3.1.2 is not a release #1128
• No OpenPGP signature for 1.3.1.2 #1127

[madler]

@madler: Please do not tag a not real release.

The security auditors asked that I tag it, for authentication.

[minchai23]

When will version 1.3.2 be released approximately?

[dmiller-nmap]

Our software (Nmap) bundles and includes zlib 1.3.1.0, the latest released version. We have customers using automated security audit software asking us for a timeline for a release addressing CVE-2026-22184, which is documented as affecting zlib 1.3.1.2 and earlier. Of course the real answer is that we do not bundle or include the untgz utility, but due to their security compliance rules, they want a release with a new version number on zlibwapi.dll. Does zlib have a timeline for a release with a version number beyond 1.3.1.2?

[madler]

Does zlib have a timeline for a release with a version number beyond 1.3.1.2?

Soon.

[Neustradamus]

@madler: Have you seen all @gvollant comments about minizip from 2024 and recently?
A lot of PRs confirmed for merging...