gnupg 1.4.6

This PR resolves CVE-2013-4576.

[Upstream release announcement](http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000337.html)