gnupg2: update to 2.5.21

New and extended features:
- gpg, gpgsm: use a partial file on decryption, remove on failure
  (disable with --compatibility-flags=no-partial-file-guard)
- gpg: use the INT_RCP_FPR subpacket in revocation signatures
- create a pkgversioninfo.txt file when building with the speedo build
  system

Bug fixes:
- gpg: fixed a potential use-after-free in batch key generation when
  handling the keyserver URL option
- gpgsm: fixed a regression in gpgsm_verify with expired certificates
- gpgsm: require a minimum tag length for GCM decryption
  (CVE-2026-34182)
- scd: limit the size of returned APDU objects from faulty cards; fixed
  the condition to retrieve ATR

Signed-off-by: Daniel Golle <redacted>

diff --git a/utils/gnupg2/Makefile b/utils/gnupg2/Makefile
index 8026554beb4888d7117f1fe735fc56d844c5e969..9834fa2212d835eecea8af5f8ff4105fdc0d9863 100644 (file)
--- a/utils/gnupg2/Makefile
+++ b/utils/gnupg2/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=gnupg
-PKG_VERSION:=2.5.20
+PKG_VERSION:=2.5.21
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
 PKG_SOURCE_URL:=https://gnupg.org/ftp/gcrypt/gnupg
-PKG_HASH:=6461266e99c308419a379abe6c356d54c214136c4589bd65951091138989ffc6
+PKG_HASH:=e3af2c8caa46a66a9329fa7c6880af260451914d819595beabc2c26597b31352
 
 PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
 PKG_LICENSE:=GPL-3.0-or-later