gnupg: security update 2.0.22 -> .24, CVE-2014-4617

Close #3091.
Merge remote-tracking branch 'upstream/master'