According to
- https://www.suse.com/security/cve/CVE-2018-25032.html
- https://security-tracker.debian.org/tracker/CVE-2018-25032
"zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches."
In my understanding of T5880 , the build data for windows will have to be updated to 1.2.12
and a new Gpg4win release seems prudent.