diff --git a/gnupg2.spec b/gnupg2.spec
index 7130ec5..e0a8dcc 100644
--- a/gnupg2.spec
+++ b/gnupg2.spec
@@ -7,7 +7,7 @@
 Summary: Utility for secure communication and data storage
 Name:    gnupg2
 Version: 2.3.3
-Release: 4%{?dist}
+Release: 5%{?dist}
 
 License: GPLv3+
 Source0: https://gnupg.org/ftp/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2
@@ -239,6 +239,9 @@ make -k check
 
 
 %changelog
+* Tue Jan 13 2026 Jakub Jelen <jjelen@redhat.com> - 2.3.3-5
+- Fix CVE-2025-68973 (gpg.fail/memcpy)
+
 * Wed Apr 19 2023 Jakub Jelen <jjelen@redhat.com> - 2.3.3-4
 - Revert marking the SHA-1 digest as weak (#2184640)