d8177977cc
From https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html: There is a heap buffer overflow in libgcrypt due to an incorrect assumption in the block buffer management code. Just decrypting some data can overflow a heap buffer with attacker controlled data, no verification or signature is validated before the vulnerability occurs.