From 202f554daac31fb36f950e6c48c38b5bd99098fd Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Tue, 13 Jan 2026 14:56:50 +0100
Subject: [PATCH] 2.3.3-5

Related: RHEL-137884
---
 gnupg2.spec | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/gnupg2.spec b/gnupg2.spec
index 7130ec5..e0a8dcc 100644
--- a/gnupg2.spec
+++ b/gnupg2.spec
@@ -7,7 +7,7 @@
 Summary: Utility for secure communication and data storage
 Name:    gnupg2
 Version: 2.3.3
-Release: 4%{?dist}
+Release: 5%{?dist}
 
 License: GPLv3+
 Source0: https://gnupg.org/ftp/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2
@@ -239,6 +239,9 @@ make -k check
 
 
 %changelog
+* Tue Jan 13 2026 Jakub Jelen <jjelen@redhat.com> - 2.3.3-5
+- Fix CVE-2025-68973 (gpg.fail/memcpy)
+
 * Wed Apr 19 2023 Jakub Jelen <jjelen@redhat.com> - 2.3.3-4
 - Revert marking the SHA-1 digest as weak (#2184640)