There is an updated pull request by leahneukirchen against master on the void-packages repository

https://github.com/leahneukirchen/void-packages zlib
https://github.com/void-linux/void-packages/pull/36383

zlib: backport upstream fix for CVE-2018-25032.
https://www.openwall.com/lists/oss-security/2022/03/24/1


A patch file from https://github.com/void-linux/void-packages/pull/36383.patch is attached