From f00f0afb151ffaff79af78186c333705187f0982 Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Tue, 13 Jan 2026 12:10:07 +0100
Subject: [PATCH] 2.4.5-3

Related: RHEL-137861
---
 gnupg2.spec | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/gnupg2.spec b/gnupg2.spec
index 2d3b219..ac993e5 100644
--- a/gnupg2.spec
+++ b/gnupg2.spec
@@ -3,7 +3,7 @@
 Summary: Utility for secure communication and data storage
 Name:    gnupg2
 Version: 2.4.5
-Release: 2%{?dist}
+Release: 3%{?dist}
 
 License: CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT
 Source0: https://gnupg.org/ftp/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2
@@ -237,6 +237,10 @@ make -k check
 
 
 %changelog
+* Tue Jan 13 2026 Jakub Jelen <jjelen@redhat.com> - 2.4.5-3
+- Fix CVE-2025-68973 (gpg.fail/memcpy)
+- Avoid weak dependencies
+
 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 2.4.5-2
 - Bump release for October 2024 mass rebuild:
   Resolves: RHEL-64018