diff --git a/gnupg2.spec b/gnupg2.spec
index 2d3b219..ac993e5 100644
--- a/gnupg2.spec
+++ b/gnupg2.spec
@@ -3,7 +3,7 @@
 Summary: Utility for secure communication and data storage
 Name:    gnupg2
 Version: 2.4.5
-Release: 2%{?dist}
+Release: 3%{?dist}
 
 License: CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT
 Source0: https://gnupg.org/ftp/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2
@@ -237,6 +237,10 @@ make -k check
 
 
 %changelog
+* Tue Jan 13 2026 Jakub Jelen <jjelen@redhat.com> - 2.4.5-3
+- Fix CVE-2025-68973 (gpg.fail/memcpy)
+- Avoid weak dependencies
+
 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 2.4.5-2
 - Bump release for October 2024 mass rebuild:
   Resolves: RHEL-64018