195993 - Change zlib version requirement to minimum required API version

Status: VERIFIED DUPLICATE of bug 194665

(SeaMonkey :: Build Config, defect)

Description

[Brian Ryner (not reading)]

We should get rid of the system zlib 1.1.4 version requirement and change it to
the minimum API version we require (1.1?).  There are a couple of reasons why
requiring 1.1.4 in configure doesn't help as far as the zlib 1.1.3 security
vulnerability:

- we don't have any runtime checking; what does it matter if the build machine
has a safe version of zlib?

- some platforms (Mac OS X) have patched zlib to address the vulnerability but
not incremented the zlib version.

So, what zlib version do we minimally require to build?

Comment 1

[Brian Ryner (not reading)]

*** This bug has been marked as a duplicate of 194665 ***

Comment 2

[Tracy Walker [:tracy]]

verified