- increasing the zlib recommended version to 1.3.1

Signed-off-by: cuneyt.ozdas <cuneyt.ozdas@autodesk.com>

Author: cozdas

.github/workflows/dependencies_latest.yml

@@ -111,7 +111,7 @@ jobs:
           share/ci/scripts/multi/install_yaml-cpp.sh 0.8.0 $EXT_PATH
           share/ci/scripts/multi/install_pystring.sh 1.1.3 $EXT_PATH
           share/ci/scripts/multi/install_pybind11.sh 2.9.2 $EXT_PATH
-          share/ci/scripts/multi/install_zlib.sh 1.2.12 $EXT_PATH
+          share/ci/scripts/multi/install_zlib.sh 1.3.1 $EXT_PATH
           share/ci/scripts/multi/install_minizip-ng.sh 3.0.6 $EXT_PATH
       - name: Install latest ext package versions
         run: |
@@ -216,7 +216,7 @@ jobs:
           share/ci/scripts/multi/install_yaml-cpp.sh 0.8.0 $EXT_PATH
           share/ci/scripts/multi/install_pystring.sh 1.1.3 $EXT_PATH
           share/ci/scripts/multi/install_pybind11.sh 2.9.2 $EXT_PATH
-          share/ci/scripts/multi/install_zlib.sh 1.2.12 $EXT_PATH
+          share/ci/scripts/multi/install_zlib.sh 1.3.1 $EXT_PATH
           share/ci/scripts/multi/install_minizip-ng.sh 3.0.6 $EXT_PATH
       - name: Install latest ext package versions
         run: |
@@ -340,7 +340,7 @@ jobs:
           share/ci/scripts/multi/install_pystring.sh 1.1.3 $EXT_PATH
           share/ci/scripts/multi/install_pybind11.sh 2.9.2 $EXT_PATH
           share/ci/scripts/multi/install_expat.sh 2.6.0 $EXT_PATH
-          share/ci/scripts/multi/install_zlib.sh 1.2.12 $EXT_PATH
+          share/ci/scripts/multi/install_zlib.sh 1.3.1 $EXT_PATH
           share/ci/scripts/multi/install_minizip-ng.sh 3.0.6 $EXT_PATH
         shell: bash
       # OSL not installed due to LLVM compilation time.

share/cmake/modules/FindExtPackages.cmake

@@ -97,13 +97,10 @@ ocio_handle_dependency(  Imath REQUIRED ALLOW_INSTALL
 # ZLIB_USE_STATIC_LIBS    Set to ON if static library is prefered (CMake 3.24+)
 #
 ###############################################################################
-# ZLIB 1.2.13 is used since it fixes a critical vulnerability.
-# See https://nvd.nist.gov/vuln/detail/CVE-2022-37434
-# See https://github.com/madler/zlib/releases/tag/v1.2.13
 ocio_handle_dependency(  ZLIB REQUIRED ALLOW_INSTALL
                          MIN_VERSION 1.2.8
-                         RECOMMENDED_VERSION 1.2.13
-                         RECOMMENDED_VERSION_REASON "CVE fixes"
+                         RECOMMENDED_VERSION 1.3.1
+                         RECOMMENDED_VERSION_REASON "Latest version tested with OCIO"
                          VERSION_VARS ZLIB_VERSION_STRING ZLIB_VERSION )
 
 ###############################################################################