Upgrade to zlib v1.2.12 in CPython binary releases

[gpshead]

BPO	47194
Nosy	@gpshead, @pfmoore, @tjguk, @ned-deily, @ambv, @zware, @zooba, @pablogsal, @miss-islington
PRs	bpo-47194: Update zlib on Windows #32241 [3.10] bpo-47194: Update zlib to v1.2.12 on Windows to resolve CVE-2018-25032 (GH-32241) #32248 [3.9] bpo-47194: Update zlib to v1.2.12 on Windows to resolve CVE-2018-25032 (GH-32241) #32249 [3.8] bpo-47194: Update zlib to v1.2.12 on Windows to resolve CVE-2018-25032 (GH-32241) #32250 [3.7] bpo-47194: Update zlib to v1.2.12 on Windows to resolve CVE-2018-25032 (GH-32241) #32251

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = None
created_at = <Date 2022-04-01.19:25:42.678>
labels = ['3.8', '3.9', 'release-blocker', 'extension-modules', '3.7', 'type-security', '3.10', '3.11', 'OS-windows']
title = 'Upgrade to zlib v1.2.12 in CPython binary releases'
updated_at = <Date 2022-04-04.03:27:26.636>
user = 'https://github.com/gpshead'

bugs.python.org fields:

activity = <Date 2022-04-04.03:27:26.636>
actor = 'ned.deily'
assignee = 'none'
closed = False
closed_date = None
closer = None
components = ['Extension Modules', 'Windows']
creation = <Date 2022-04-01.19:25:42.678>
creator = 'gregory.p.smith'
dependencies = []
files = []
hgrepos = []
issue_num = 47194
keywords = ['patch']
message_count = 5.0
messages = ['416510', '416552', '416555', '416556', '416651']
nosy_count = 9.0
nosy_names = ['gregory.p.smith', 'paul.moore', 'tim.golden', 'ned.deily', 'lukasz.langa', 'zach.ware', 'steve.dower', 'pablogsal', 'miss-islington']
pr_nums = ['32241', '32248', '32249', '32250', '32251']
priority = 'release blocker'
resolution = None
stage = 'patch review'
status = 'open'
superseder = None
type = 'security'
url = 'https://bugs.python.org/issue47194'
versions = ['Python 3.7', 'Python 3.8', 'Python 3.9', 'Python 3.10', 'Python 3.11']

[gpshead]

zlib v1.2.11 as used in Windows binary releases contains a security issue that, while fixed in its git repo years ago, never wound up in a release or a CVE until just now.

Folllow the https://www.openwall.com/lists/oss-security/2022/03/24/1 thread and the and recently assigned CVE-2018-25032.

I believe we only ship our own zlib on Windows so this issue is tagged as such. The above oss-security thread is where an idea of severity will come out.