diff --git a/backport-Fix-an-uninitialized-variable.patch b/backport-Fix-an-uninitialized-variable.patch
new file mode 100644
index 0000000000000000000000000000000000000000..8dbc048a5d356201896939fc3992c9b04afdbef5
--- /dev/null
+++ b/backport-Fix-an-uninitialized-variable.patch
@@ -0,0 +1,32 @@
+From 6e37569847d7948c63c14dd67c42993eb21d6018 Mon Sep 17 00:00:00 2001
+From: Collin Funk via Gnupg-devel <gnupg-devel@gnupg.org>
+Date: Thu, 3 Jul 2025 20:34:05 -0700
+Subject: [PATCH] Fix an uninitialized variable.
+
+* src/engine-gpg.c (gpg_getdirect): Initialize ERR to zero to satisfy
+the loop condition.
+
+--
+
+Fixes-commit: 0a64c7d0c6d0463cf2e06b3a01ef5be4d879bcf0
+Signed-off-by: Collin Funk <collin.funk1@gmail.com>
+---
+ src/engine-gpg.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/engine-gpg.c b/src/engine-gpg.c
+index b3399027..c6c5c4e6 100644
+--- a/src/engine-gpg.c
++++ b/src/engine-gpg.c
+@@ -4226,7 +4226,7 @@ gpg_getdirect (void *engine, const char *argv[],
+                gpgme_data_t dataout, unsigned int flags)
+ {
+   engine_gpg_t gpg = engine;
+-  gpgme_error_t err;
++  gpgme_error_t err = 0;
+   int i;
+ 
+   if (!engine || !argv || !dataout || flags)
+-- 
+2.43.0
+
diff --git a/gpgme.spec b/gpgme.spec
index 69a81814aa8b4ceabd617fd6891551a6ddfa8978..817c19e1c0642fa551dd168d7fa55e119ab6ed3c 100644
--- a/gpgme.spec
+++ b/gpgme.spec
@@ -1,6 +1,6 @@
 Name:           gpgme
 Version:        2.0.0
-Release:        3
+Release:        4
 Summary:        GnuPG Made Easy
 License:        LGPL-2.1-or-later AND MIT
 URL:            https://gnupg.org/related_software/gpgme/
@@ -10,6 +10,7 @@ Source0:        https://gnupg.org/ftp/gcrypt/gpgme/gpgme-%{version}.tar.bz2
 Patch0:         0001-don-t-add-extra-libraries-for-linking.patch
 # add -D_FILE_OFFSET_BITS... to gpgme-config, upstreamable
 Patch1:         gpgme-1.3.2-largefile.patch
+Patch2:         backport-Fix-an-uninitialized-variable.patch
 
 BuildRequires: make gcc
 BuildRequires: gnupg2 >= 2.2.24
@@ -72,6 +73,9 @@ rm -fv %{buildroot}%{_infodir}/dir
 %{_mandir}/man?/*
 
 %changelog
+* Fri Aug 8 2025 yixiangzhike <yixiangzhike007@163.com> - 2.0.0-4
+- backport upstream patch to fix an uninitialized variable
+
 * Fri Aug 1 2025 yixiangzhike <yixiangzhike007@163.com> - 2.0.0-3
 - fix source repo URL in yaml