From cb0dd73c639fcef0a1d2d73226bbec713afdd42f Mon Sep 17 00:00:00 2001
From: P. J. McDermott <pj@pehjota.net>
Date: Thu, 23 Feb 2023 12:46:22 -0500
Subject: build: Distribute embedded xcf2png, use by default

---
(limited to 'README')

diff --git a/README b/README
index 41cb2d0..9d069d7 100644
--- a/README
+++ b/README
@@ -18,4 +18,9 @@ Boukengine requires the following library packages to build and run:
   * `zlib`
   * `Lua` 5.1 or later
 
-Boukengine additionally requires `xcftools` at build time.
+At build time, Boukengine can optionally use a copy of `xcftools`
+installed on the system.  However, a copy included with Boukengine is
+used by default and is strongly recommended, as `xcftools` has been
+removed from many modern system distributions and any remaining
+distributions of it may be vulnerable to arbitrary code execution
+vulnerabilities on at least some architectures.
--
cgit v0.9.1