Fix SAST reports

Resolves: RHEL-25067

libksba-1.5.1-coverity.patch

@@ -155,3 +155,34 @@ index 1b72bf0..81c31ed 100644
 -- 
 2.30.2
 
+From 75e94db38ccd9ed166b40fb2d8aaed7c094cff69 Mon Sep 17 00:00:00 2001
+From: Jakub Jelen <jjelen@redhat.com>
+Date: Mon, 12 Feb 2024 09:52:43 +0100
+Subject: [PATCH] der-builder: Fix possible uninitialized variable.
+
+* src/der-builder.c (_ksba_der_builder_get): Initialize ERR.
+
+--
+
+GnuPG-bug-id: 6992
+Signed-off-by: Jakub Jelen <jjelen@redhat.com>
+---
+ src/der-builder.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/der-builder.c b/src/der-builder.c
+index 768bd0f..d136bb8 100644
+--- a/src/der-builder.c
++++ b/src/der-builder.c
+@@ -549,7 +549,7 @@ compute_lengths (ksba_der_t d, int idx)
+ gpg_error_t
+ _ksba_der_builder_get (ksba_der_t d, unsigned char **r_obj, size_t *r_objlen)
+ {
+-  gpg_error_t err;
++  gpg_error_t err = 0;
+   int idx;
+   unsigned char *buffer = NULL;
+   unsigned char *p;
+-- 
+2.45.2
+

libksba.spec

@@ -11,6 +11,8 @@ Source0: https://www.gnupg.org/ftp/gcrypt/libksba/libksba-%{version}.tar.bz2
 Source1: https://www.gnupg.org/ftp/gcrypt/libksba/libksba-%{version}.tar.bz2.sig
 
 Patch1: libksba-1.3.0-multilib.patch
+# some patches from previous batches
+# https://dev.gnupg.org/T6992
 Patch2: libksba-1.5.1-coverity.patch
 # Fix for CVE-2022-3515
 Patch3: libksba-1.5.1-overflow.patch