From: Daniel Golle <redacted>
Date: Thu, 20 Aug 2026 13:41:12 +0000 (+0100)
Subject: gnupg2: update to 2.5.21
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=ef77db3bf9adb3423de9416afd442f5f30c00f9c;p=openwrt-packages.git

gnupg2: update to 2.5.21

New and extended features:
- gpg, gpgsm: use a partial file on decryption, remove on failure
  (disable with --compatibility-flags=no-partial-file-guard)
- gpg: use the INT_RCP_FPR subpacket in revocation signatures
- create a pkgversioninfo.txt file when building with the speedo build
  system

Bug fixes:
- gpg: fixed a potential use-after-free in batch key generation when
  handling the keyserver URL option
- gpgsm: fixed a regression in gpgsm_verify with expired certificates
- gpgsm: require a minimum tag length for GCM decryption
  (CVE-2026-34182)
- scd: limit the size of returned APDU objects from faulty cards; fixed
  the condition to retrieve ATR

Signed-off-by: Daniel Golle <redacted>
---

diff --git a/utils/gnupg2/Makefile b/utils/gnupg2/Makefile
index 8026554be..9834fa221 100644
--- a/utils/gnupg2/Makefile
+++ b/utils/gnupg2/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=gnupg
-PKG_VERSION:=2.5.20
+PKG_VERSION:=2.5.21
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
 PKG_SOURCE_URL:=https://gnupg.org/ftp/gcrypt/gnupg
-PKG_HASH:=6461266e99c308419a379abe6c356d54c214136c4589bd65951091138989ffc6
+PKG_HASH:=e3af2c8caa46a66a9329fa7c6880af260451914d819595beabc2c26597b31352
 
 PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
 PKG_LICENSE:=GPL-3.0-or-later