Every CVE Search/ Get API key

CVE-2025-68973

In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where...

7.8 HighFix available

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.15%Up 0.1 points since Dec 29, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
CVE-2025-68973
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-675
Updated
2026-11-02
EUVDEUVD-2025-205519 7.8

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
EUVD-2025-205519
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-pj23-86ww-f72p 7.8

In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where...

In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.

Record
GHSA-pj23-86ww-f72p
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-675, CWE-787
Updated
2026-11-02
NVD 7.8

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
CVE-2025-68973
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-675, CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2025-68973 7.0

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
ALPINE-CVE-2025-68973
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2025-68973 7.0
Record
BELL-CVE-2025-68973
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 47 moreShow less
OSV 7.8

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
CVE-2025-68973
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-675
Updated
2026-11-02
OSVDEBIAN-CVE-2025-68973 7.0

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
DEBIAN-CVE-2025-68973
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVJLSEC-2026-563 7.0

In GnuPG through 2.4.8, `armor_filter` in g10/armor.c has two increments of an index variable where...

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
JLSEC-2026-563
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1072 7.8

gnupg2 security update

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories.

Security Fix(es):

In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.(CVE-2025-68973)

Record
OESA-2026-1072
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:0697 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:0697
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:0719 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:0719
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:0728 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:0728
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:0935 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:0935
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:0974 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:0974
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:1014 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:1014
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:1229 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:1229
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:1230 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:1230
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:1468 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:1468
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:1629 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:1629
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:1677 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:1677
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:1705 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:1705
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:1719 7.8

Red Hat Security Advisory: gnupg2 security update

Record
RHSA-2026:1719
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:0697 7.8

Important: gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

  • GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:0697
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:0719 7.8

Important: gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

  • GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:0719
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:0728 7.8

Important: gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

  • GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:0728
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVROOT-OS-ALPINE-319-CVE-2025-68973 7.8

CVE-2025-68973 in gnupg - Patched by Root

Root has patched CVE-2025-68973 in the gnupg package for Root:Alpine:3.19. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-319-CVE-2025-68973
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-68973 7.8

CVE-2025-68973 in gnupg2 - Patched by Root

Root has patched CVE-2025-68973 in the gnupg2 package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2025-68973
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2004-CVE-2025-68973 7.8

CVE-2025-68973 in gnupg2 - Patched by Root

Root has patched CVE-2025-68973 in the gnupg2 package for Root:Ubuntu:20.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2004-CVE-2025-68973
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-68973 7.8

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
UBUNTU-CVE-2025-68973
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:0697 No score

Important: gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

  • GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:0697
Updated
2026-11-02
OSVALSA-2026:0719 No score

Important: gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

  • GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:0719
Updated
2026-11-02
OSVALSA-2026:0728 No score

Important: gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

  • GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:0728
Updated
2026-11-02
OSVAZL-73204 No score

CVE-2025-68973 affecting package gnupg2 for versions less than 2.4.9-1

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
AZL-73204
Updated
2026-11-02
OSVAZL-73367 No score

CVE-2025-68973 affecting package gnupg2 for versions less than 2.4.0-3

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Record
AZL-73367
Updated
2026-11-02
OSVCLSA-2026-1768989383 No score

Fix CVE(s): CVE-2025-68973

  • SECURITY UPDATE: Possible memory corruption in the armor parser
    • debian/patches/CVE-2025-68973.patch: fix faulty double increment
    • CVE-2025-68973
Record
CLSA-2026-1768989383
Updated
2026-11-02
OSVCLSA-2026-1769015071 No score

Fix CVE(s): CVE-2025-68973

  • SECURITY UPDATE: memory corruption in armor parser
    • debian/patches/CVE-2025-68973.patch: Fix faulty double increment in armor_filter function.
    • CVE-2025-68973
Record
CLSA-2026-1769015071
Updated
2026-11-02
OSVCLSA-2026-1769018042 No score

Fix CVE(s): CVE-2025-68973

  • SECURITY UPDATE: memory corruption in armor parser
    • debian/patches/CVE-2025-68973.patch: Fix faulty double increment in armor_filter function.
    • CVE-2025-68973
Record
CLSA-2026-1769018042
Updated
2026-11-02
OSVCLSA-2026-1769085200 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix possible memory corruption in the armor parser
Record
CLSA-2026-1769085200
Updated
2026-11-02
OSVCLSA-2026-1769162862 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix faulty double increment
Record
CLSA-2026-1769162862
Updated
2026-11-02
OSVCLSA-2026-1769163161 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix faulty double increment
Record
CLSA-2026-1769163161
Updated
2026-11-02
OSVCLSA-2026-1769163825 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix faulty double increment
Record
CLSA-2026-1769163825
Updated
2026-11-02
OSVCLSA-2026-1769171615 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix possible memory corruption in the armor parser that could lead to out-of-bounds write for crafted input
Record
CLSA-2026-1769171615
Updated
2026-11-02
OSVCLSA-2026-1769182340 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input
Record
CLSA-2026-1769182340
Updated
2026-11-02
OSVCLSA-2026-1769182554 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input
Record
CLSA-2026-1769182554
Updated
2026-11-02
OSVCLSA-2026-1769426059 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix possible memory corruption in the armor parser that could lead to out-of-bounds write for crafted input
Record
CLSA-2026-1769426059
Updated
2026-11-02
OSVCLSA-2026-1769433341 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input
Record
CLSA-2026-1769433341
Updated
2026-11-02
OSVCLSA-2026-1769524269 No score

Fix CVE(s): CVE-2025-68973

  • SECURITY UPDATE: memory corruption in armor parser
    • debian/patches/CVE-2025-68973.patch: fix faulty double increment.
    • CVE-2025-68973
Record
CLSA-2026-1769524269
Updated
2026-11-02
OSVCLSA-2026-1769679566 No score

gnupg2: Fix of CVE-2025-68973

  • CVE-2025-68973: fix out-of-bounds write in armor_filter function by correcting index variable increments
Record
CLSA-2026-1769679566
Updated
2026-11-02
OSVCLSA-2026-1770982328 No score

Fix CVE(s): CVE-2025-68973

  • SECURITY UPDATE: Possible memory corruption in the armor parser
    • debian/patches/CVE-2025-68973.patch: fix faulty double increment
    • CVE-2025-68973
Record
CLSA-2026-1770982328
Updated
2026-11-02
OSVCLSA-2026-1786038406 No score

gnupg2: Fix of CVE-2025-68973

  • Re-tag base release to 2.0.22-5.0.1 to align NVR with Oracle Linux errata
  • CVE-2025-68973: some improvements
Record
CLSA-2026-1786038406
Updated
2026-11-02
OSVMGASA-2026-0197 No score

Updated gnupg2 packages fix security vulnerabilities

CVE-2025-68973, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. CVE-2026-24882, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. CVE-2026-24883, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash). Upstream has still not fixed CVE-2025-68972. We will be tracking the solution and providing an update to fix it when possible.

Record
MGASA-2026-0197
Updated
2026-11-02
OSVopenSUSE-SU-2026:10001-1 No score

dirmngr-2.5.16-1.1 on GA media

These are all security issues fixed in the dirmngr-2.5.16-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10001-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gnupg
Alpine:v3.20
 before 2.4.9-r0
2.4.9-r0
gnupg
Alpine:v3.21
 before 2.4.9-r0
2.4.9-r0
gnupg
Alpine:v3.22
 before 2.4.9-r0
2.4.9-r0
gnupg
Alpine:v3.23
 before 2.4.9-r0
2.4.9-r0
gnupg
Alpine:v3.24
 before 2.4.9-r0
2.4.9-r0
gnupg2
AlmaLinux:10
 before 2.4.5-3.el10_1
2.4.5-3.el10_1
gnupg2-smime
AlmaLinux:10
 before 2.4.5-3.el10_1
2.4.5-3.el10_1
gnupg2
AlmaLinux:9
 before 2.3.3-5.el9_7
2.3.3-5.el9_7
gnupg2-smime
AlmaLinux:9
 before 2.3.3-5.el9_7
2.3.3-5.el9_7
gnupg2
AlmaLinux:8
 before 2.2.20-4.el8_10
2.2.20-4.el8_10
Show 203 moreShow less
Affected packages
PackageAffectedFixed
gnupg2-smime
AlmaLinux:8
 before 2.2.20-4.el8_10
2.2.20-4.el8_10
gnupg2
Azure Linux:3
 before 2.4.9-1
2.4.9-1
gnupg2
Azure Linux:2
 before 2.4.0-3
2.4.0-3
gnupg
Alpaquita:23
 2.2.40-r0 up to 2.2.40-r1
2.2.40-r1
gnupg
Alpaquita:25
 2.4.7-r0 up to 2.4.9-r0
2.4.9-r0
gnupg
Alpaquita:stream
 2.4.0-r1 up to 2.4.9-r0
2.4.9-r0
dirmngr
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gnupg
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gnupg-agent
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gnupg-l10n
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gnupg-utils
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gnupg2
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpg
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpg-agent
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpg-wks-client
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpg-wks-server
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpgconf
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpgsm
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpgv
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpgv-static
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpgv-win32
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
gpgv2
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
scdaemon
TuxCare:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5+tuxcare.els1
2.2.19-3ubuntu2.5+tuxcare.els1
dirmngr
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gnupg
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gnupg-agent
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gnupg-l10n
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gnupg-utils
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gnupg2
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpg
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpg-agent
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpg-wks-client
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpg-wks-server
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpgconf
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpgsm
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpgv
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpgv-static
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpgv-win32
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
gpgv2
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
scdaemon
TuxCare:Ubuntu:18.04
 before 2.2.4-1ubuntu1.6+tuxcare.els1
2.2.4-1ubuntu1.6+tuxcare.els1
dirmngr
TuxCare:Ubuntu:16.04
 before 2.1.11-6ubuntu2.1+tuxcare.els2
2.1.11-6ubuntu2.1+tuxcare.els2
gnupg-agent
TuxCare:Ubuntu:16.04
 before 2.1.11-6ubuntu2.1+tuxcare.els2
2.1.11-6ubuntu2.1+tuxcare.els2
gnupg2
TuxCare:Ubuntu:16.04
 before 2.1.11-6ubuntu2.1+tuxcare.els2
2.1.11-6ubuntu2.1+tuxcare.els2
gpgsm
TuxCare:Ubuntu:16.04
 before 2.1.11-6ubuntu2.1+tuxcare.els2
2.1.11-6ubuntu2.1+tuxcare.els2
gpgv2
TuxCare:Ubuntu:16.04
 before 2.1.11-6ubuntu2.1+tuxcare.els2
2.1.11-6ubuntu2.1+tuxcare.els2
scdaemon
TuxCare:Ubuntu:16.04
 before 2.1.11-6ubuntu2.1+tuxcare.els2
2.1.11-6ubuntu2.1+tuxcare.els2
gnupg2
TuxCare:AlmaLinux:9.6
 before 2.3.3-4.el9_6.tuxcare.els1
2.3.3-4.el9_6.tuxcare.els1
gnupg2-smime
TuxCare:AlmaLinux:9.6
 before 2.3.3-4.el9_6.tuxcare.els1
2.3.3-4.el9_6.tuxcare.els1
gnupg2
TuxCare:CentOS-Stream:8
 before 2.2.20-3.el8.tuxcare.els1
2.2.20-3.el8.tuxcare.els1
gnupg2-smime
TuxCare:CentOS-Stream:8
 before 2.2.20-3.el8.tuxcare.els1
2.2.20-3.el8.tuxcare.els1
gnupg2
TuxCare:CentOS:8.4
 before 2.2.20-3.el8.tuxcare.els1
2.2.20-3.el8.tuxcare.els1
gnupg2-smime
TuxCare:CentOS:8.4
 before 2.2.20-3.el8.tuxcare.els1
2.2.20-3.el8.tuxcare.els1
gnupg2
TuxCare:CentOS:8.5
 before 2.2.20-3.el8.tuxcare.els1
2.2.20-3.el8.tuxcare.els1
gnupg2-smime
TuxCare:CentOS:8.5
 before 2.2.20-3.el8.tuxcare.els1
2.2.20-3.el8.tuxcare.els1
gnupg2
TuxCare:OracleLinux:6
 before 2.0.14-9.el6_10.tuxcare.els1
2.0.14-9.el6_10.tuxcare.els1
gnupg2-smime
TuxCare:OracleLinux:6
 before 2.0.14-9.el6_10.tuxcare.els1
2.0.14-9.el6_10.tuxcare.els1
gnupg2
TuxCare:OracleLinux:7
 before 2.0.22-5.el7_5.tuxcare.els1
2.0.22-5.el7_5.tuxcare.els1
gnupg2-smime
TuxCare:OracleLinux:7
 before 2.0.22-5.el7_5.tuxcare.els1
2.0.22-5.el7_5.tuxcare.els1
gnupg2
TuxCare:RHEL:7
 before 2.0.22-5.el7_5.tuxcare.els1
2.0.22-5.el7_5.tuxcare.els1
gnupg2-smime
TuxCare:RHEL:7
 before 2.0.22-5.el7_5.tuxcare.els1
2.0.22-5.el7_5.tuxcare.els1
gnupg2
TuxCare:CentOS:6
 before 2.0.14-9.el6_10.tuxcare.els1
2.0.14-9.el6_10.tuxcare.els1
gnupg2-smime
TuxCare:CentOS:6
 before 2.0.14-9.el6_10.tuxcare.els1
2.0.14-9.el6_10.tuxcare.els1
gnupg2
TuxCare:CentOS:7
 before 2.0.22-5.el7_5.tuxcare.els1
2.0.22-5.el7_5.tuxcare.els1
gnupg2-smime
TuxCare:CentOS:7
 before 2.0.22-5.el7_5.tuxcare.els1
2.0.22-5.el7_5.tuxcare.els1
dirmngr
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gnupg
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gnupg-agent
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gnupg-l10n
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gnupg-utils
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gnupg2
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpg
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpg-agent
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpg-wks-client
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpg-wks-server
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpgconf
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpgsm
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpgv
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpgv-static
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpgv-win32
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gpgv2
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
scdaemon
TuxCare:Debian:10
 before 2.2.12-1+deb10u2+tuxcare.els1
2.2.12-1+deb10u2+tuxcare.els1
gnupg2
TuxCare:AlmaLinux:9.2
 before 2.3.3-2.el9_0.tuxcare.els1
2.3.3-2.el9_0.tuxcare.els1
gnupg2-smime
TuxCare:AlmaLinux:9.2
 before 2.3.3-2.el9_0.tuxcare.els1
2.3.3-2.el9_0.tuxcare.els1
gnupg
TuxCare:Ubuntu:16.04
 before 1.4.20-1ubuntu3.3+tuxcare.els2
1.4.20-1ubuntu3.3+tuxcare.els2
gnupg-curl
TuxCare:Ubuntu:16.04
 before 1.4.20-1ubuntu3.3+tuxcare.els2
1.4.20-1ubuntu3.3+tuxcare.els2
gpgv
TuxCare:Ubuntu:16.04
 before 1.4.20-1ubuntu3.3+tuxcare.els2
1.4.20-1ubuntu3.3+tuxcare.els2
gnupg2
TuxCare:OracleLinux:7
 before 2.0.22-5.0.1.el7_5.tuxcare.els1
2.0.22-5.0.1.el7_5.tuxcare.els1
gnupg2-smime
TuxCare:OracleLinux:7
 before 2.0.22-5.0.1.el7_5.tuxcare.els1
2.0.22-5.0.1.el7_5.tuxcare.els1
gnupg2
Debian:12
 before 2.2.40-1.1+deb12u2, plus listed versions
2.2.40-1.12.2.40-1.1+deb12u1
2.2.40-1.1+deb12u2
gnupg2
Debian:13
 before 2.4.7-21+deb13u1, plus listed versions
2.4.7-21
2.4.7-21+deb13u1
gnupg2
Debian:14
 before 2.4.8-5, plus listed versions
2.4.7-212.4.8-12.4.8-22.4.8-32.4.8-4
2.4.8-5
gnupg2
Debian:11
 before 2.2.27-2+deb11u3, plus listed versions
2.2.27-22.2.27-2+deb11u12.2.27-2+deb11u2
2.2.27-2+deb11u3
GnuPG_jll
Julia
 before 2.5.16+0
2.5.16+0
gnupg2
Mageia:9
From an advisory covering 3 CVEs
 before 2.3.8-1.5.mga9
2.3.8-1.5.mga9
gnupg2
openEuler:24.03-LTS-SP1
 before 2.4.3-13.oe2403sp1
2.4.3-13.oe2403sp1
gnupg2
openEuler:24.03-LTS-SP2
 before 2.4.3-13.oe2403sp2
2.4.3-13.oe2403sp2
gnupg2
openEuler:24.03-LTS-SP3
 before 2.4.3-13.oe2403sp3
2.4.3-13.oe2403sp3
gnupg2
openEuler:20.03-LTS-SP4
 before 2.2.21-10.oe2003sp4
2.2.21-10.oe2003sp4
gnupg2
openEuler:22.03-LTS-SP3
 before 2.2.32-9.oe2203sp3
2.2.32-9.oe2203sp3
gnupg2
openEuler:22.03-LTS-SP4
 before 2.2.32-9.oe2203sp4
2.2.32-9.oe2203sp4
gnupg2
openEuler:24.03-LTS
 before 2.4.3-10.oe2403
2.4.3-10.oe2403
gnupg2-debuginfo
Red Hat:enterprise_linux:10.1
 before 0:2.4.5-3.el10_1
0:2.4.5-3.el10_1
gnupg2-debugsource
Red Hat:enterprise_linux:10.1
 before 0:2.4.5-3.el10_1
0:2.4.5-3.el10_1
gnupg2-smime
Red Hat:enterprise_linux:10.1
 before 0:2.4.5-3.el10_1
0:2.4.5-3.el10_1
gnupg2-smime-debuginfo
Red Hat:enterprise_linux:10.1
 before 0:2.4.5-3.el10_1
0:2.4.5-3.el10_1
gnupg2
Red Hat:enterprise_linux:10.1
 before 0:2.4.5-3.el10_1
0:2.4.5-3.el10_1
gnupg2-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2-smime
Red Hat:enterprise_linux:9::appstream
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2-smime-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2
Red Hat:enterprise_linux:9::baseos
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2-smime-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2
Red Hat:enterprise_linux:8::baseos
 before 0:2.2.20-4.el8_10
0:2.2.20-4.el8_10
gnupg2-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.2.20-4.el8_10
0:2.2.20-4.el8_10
gnupg2-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:2.2.20-4.el8_10
0:2.2.20-4.el8_10
gnupg2-smime
Red Hat:enterprise_linux:8::baseos
 before 0:2.2.20-4.el8_10
0:2.2.20-4.el8_10
gnupg2-smime-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.2.20-4.el8_10
0:2.2.20-4.el8_10
gnupg2
Red Hat:rhel_e4s:8.8::baseos
 before 0:2.2.20-3.el8_8.1
0:2.2.20-3.el8_8.1
gnupg2-smime
Red Hat:rhel_e4s:8.8::baseos
 before 0:2.2.20-3.el8_8.1
0:2.2.20-3.el8_8.1
gnupg2
Red Hat:rhel_tus:8.8::baseos
 before 0:2.2.20-3.el8_8.1
0:2.2.20-3.el8_8.1
gnupg2-smime
Red Hat:rhel_tus:8.8::baseos
 before 0:2.2.20-3.el8_8.1
0:2.2.20-3.el8_8.1
gnupg2
Red Hat:rhel_aus:8.6::baseos
 before 0:2.2.20-3.el8_6.1
0:2.2.20-3.el8_6.1
gnupg2-smime
Red Hat:rhel_aus:8.6::baseos
 before 0:2.2.20-3.el8_6.1
0:2.2.20-3.el8_6.1
gnupg2
Red Hat:rhel_e4s:8.6::baseos
 before 0:2.2.20-3.el8_6.1
0:2.2.20-3.el8_6.1
gnupg2-smime
Red Hat:rhel_e4s:8.6::baseos
 before 0:2.2.20-3.el8_6.1
0:2.2.20-3.el8_6.1
gnupg2
Red Hat:rhel_tus:8.6::baseos
 before 0:2.2.20-3.el8_6.1
0:2.2.20-3.el8_6.1
gnupg2-smime
Red Hat:rhel_tus:8.6::baseos
 before 0:2.2.20-3.el8_6.1
0:2.2.20-3.el8_6.1
gnupg2
Red Hat:rhel_aus:8.4::baseos
 before 0:2.2.20-2.el8_4.1
0:2.2.20-2.el8_4.1
gnupg2-smime
Red Hat:rhel_aus:8.4::baseos
 before 0:2.2.20-2.el8_4.1
0:2.2.20-2.el8_4.1
gnupg2
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:2.2.20-2.el8_4.1
0:2.2.20-2.el8_4.1
gnupg2-smime
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:2.2.20-2.el8_4.1
0:2.2.20-2.el8_4.1
gnupg2-smime
Red Hat:rhel_eus:9.6::appstream
 before 0:2.3.3-4.el9_6.1
0:2.3.3-4.el9_6.1
gnupg2
Red Hat:rhel_eus:9.6::baseos
 before 0:2.3.3-4.el9_6.1
0:2.3.3-4.el9_6.1
gnupg2-smime
Red Hat:rhel_eus:9.4::appstream
 before 0:2.3.3-4.el9_4.1
0:2.3.3-4.el9_4.1
gnupg2
Red Hat:rhel_eus:9.4::baseos
 before 0:2.3.3-4.el9_4.1
0:2.3.3-4.el9_4.1
gnupg2
Red Hat:rhel_aus:8.2::baseos
 before 0:2.2.9-1.el8_2.1
0:2.2.9-1.el8_2.1
gnupg2-smime
Red Hat:rhel_aus:8.2::baseos
 before 0:2.2.9-1.el8_2.1
0:2.2.9-1.el8_2.1
gnupg2-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:2.4.5-2.el10_0.1
0:2.4.5-2.el10_0.1
gnupg2-debugsource
Red Hat:enterprise_linux_eus:10.0
 before 0:2.4.5-2.el10_0.1
0:2.4.5-2.el10_0.1
gnupg2-smime
Red Hat:enterprise_linux_eus:10.0
 before 0:2.4.5-2.el10_0.1
0:2.4.5-2.el10_0.1
gnupg2-smime-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:2.4.5-2.el10_0.1
0:2.4.5-2.el10_0.1
gnupg2
Red Hat:enterprise_linux_eus:10.0
 before 0:2.4.5-2.el10_0.1
0:2.4.5-2.el10_0.1
gnupg2
Red Hat:rhel_els:7
 before 0:2.0.22-5.el7_9.1
0:2.0.22-5.el7_9.1
gnupg2-debuginfo
Red Hat:rhel_els:7
 before 0:2.0.22-5.el7_9.1
0:2.0.22-5.el7_9.1
gnupg2-smime
Red Hat:rhel_els:7
 before 0:2.0.22-5.el7_9.1
0:2.0.22-5.el7_9.1
gnupg2-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.3.3-2.el9_2.1
0:2.3.3-2.el9_2.1
gnupg2-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.3.3-2.el9_2.1
0:2.3.3-2.el9_2.1
gnupg2-smime
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.3.3-2.el9_2.1
0:2.3.3-2.el9_2.1
gnupg2-smime-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.3.3-2.el9_2.1
0:2.3.3-2.el9_2.1
gnupg2
Red Hat:rhel_e4s:9.2::baseos
 before 0:2.3.3-2.el9_2.1
0:2.3.3-2.el9_2.1
gnupg2-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:2.3.3-2.el9_2.1
0:2.3.3-2.el9_2.1
gnupg2-debugsource
Red Hat:rhel_e4s:9.2::baseos
 before 0:2.3.3-2.el9_2.1
0:2.3.3-2.el9_2.1
gnupg2-smime-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:2.3.3-2.el9_2.1
0:2.3.3-2.el9_2.1
gnupg2-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.3.3-2.el9_0.1
0:2.3.3-2.el9_0.1
gnupg2-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.3.3-2.el9_0.1
0:2.3.3-2.el9_0.1
gnupg2-smime
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.3.3-2.el9_0.1
0:2.3.3-2.el9_0.1
gnupg2-smime-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.3.3-2.el9_0.1
0:2.3.3-2.el9_0.1
gnupg2
Red Hat:rhel_e4s:9.0::baseos
 before 0:2.3.3-2.el9_0.1
0:2.3.3-2.el9_0.1
gnupg2-debuginfo
Red Hat:rhel_e4s:9.0::baseos
 before 0:2.3.3-2.el9_0.1
0:2.3.3-2.el9_0.1
gnupg2-debugsource
Red Hat:rhel_e4s:9.0::baseos
 before 0:2.3.3-2.el9_0.1
0:2.3.3-2.el9_0.1
gnupg2-smime-debuginfo
Red Hat:rhel_e4s:9.0::baseos
 before 0:2.3.3-2.el9_0.1
0:2.3.3-2.el9_0.1
gnupg2
Rocky Linux:10
 before 0:2.4.5-3.el10_1
0:2.4.5-3.el10_1
gnupg2
Rocky Linux:9
 before 0:2.3.3-5.el9_7
0:2.3.3-5.el9_7
gnupg2
Rocky Linux:8
 before 0:2.2.20-4.el8_10
0:2.2.20-4.el8_10
gnupg
Root:Alpine:3.19
 before 2.4.4-r00071
2.4.4-r000712.4.4-r00072
rootio-gnupg
Root:Alpine:3.19
 before 2.4.4-r00071
2.4.4-r000712.4.4-r00072
gnupg2
Root:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5.aikido.1
2.2.19-3ubuntu2.5.aikido.12.2.19-3ubuntu2.5.aikido.22.2.19-3ubuntu2.5.aikido.3
rootio-gnupg2
Root:Ubuntu:20.04
 before 2.2.19-3ubuntu2.5.aikido.1
2.2.19-3ubuntu2.5.aikido.12.2.19-3ubuntu2.5.aikido.22.2.19-3ubuntu2.5.aikido.3
gpg2
SUSE:Linux Enterprise Micro 5.3
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise Micro 5.4
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise Micro 5.5
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise Micro 5.2
 before 2.2.27-150300.3.16.1
2.2.27-150300.3.16.1
gpg2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 2.4.4-150600.3.12.1
2.4.4-150600.3.12.1
gpg2
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 2.4.4-150600.3.12.1
2.4.4-150600.3.12.1
gpg2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 2.4.4-150600.3.12.1
2.4.4-150600.3.12.1
gpg2
openSUSE:Leap 15.6
 before 2.4.4-150600.3.12.1
2.4.4-150600.3.12.1
gpg2
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 2.0.24-9.17.1
2.0.24-9.17.1
gpg2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 2.0.24-9.17.1
2.0.24-9.17.1
gpg2
SUSE:Linux Enterprise Server 16.0
 before 2.5.5-160000.3.1
2.5.5-160000.3.1
gpg2
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 2.5.5-160000.3.1
2.5.5-160000.3.1
gpg2
SUSE:Linux Micro 6.2
 before 2.5.5-160000.3.1
2.5.5-160000.3.1
gpg2
SUSE:Linux Micro 6.0
 before 2.4.4-6.1
2.4.4-6.1
gpg2
SUSE:Linux Micro 6.1
 before 2.4.4-slfo.1.1_6.1
2.4.4-slfo.1.1_6.1
gnupg
Ubuntu:Pro:14.04:LTS
 before 1.4.16-1ubuntu2.6+esm2, plus listed versions
1.4.14-1ubuntu21.4.15-1.1ubuntu11.4.15-1.1ubuntu21.4.15-2ubuntu11.4.16-1ubuntu1
Show 7 moreShow less
1.4.16-1ubuntu21.4.16-1ubuntu2.11.4.16-1ubuntu2.31.4.16-1ubuntu2.41.4.16-1ubuntu2.51.4.16-1ubuntu2.61.4.16-1ubuntu2.6+esm1
1.4.16-1ubuntu2.6+esm2
gnupg
Ubuntu:Pro:16.04:LTS
 before 1.4.20-1ubuntu3.3+esm3, plus listed versions
1.4.18-7ubuntu11.4.19-6ubuntu11.4.20-1ubuntu11.4.20-1ubuntu21.4.20-1ubuntu3
Show 4 moreShow less
1.4.20-1ubuntu3.11.4.20-1ubuntu3.21.4.20-1ubuntu3.31.4.20-1ubuntu3.3+esm2
1.4.20-1ubuntu3.3+esm3
gnupg2
Ubuntu:Pro:16.04:LTS
 before 2.1.11-6ubuntu2.1+esm3, plus listed versions
2.0.28-3ubuntu12.0.28-3ubuntu22.1.11-6ubuntu12.1.11-6ubuntu22.1.11-6ubuntu2.12.1.11-6ubuntu2.1+esm12.1.11-6ubuntu2.1+esm2
2.1.11-6ubuntu2.1+esm3
gnupg2
Ubuntu:Pro:18.04:LTS
 before 2.2.4-1ubuntu1.6+esm2, plus listed versions
2.1.15-1ubuntu82.2.4-1ubuntu12.2.4-1ubuntu1.12.2.4-1ubuntu1.22.2.4-1ubuntu1.3
Show 4 moreShow less
2.2.4-1ubuntu1.42.2.4-1ubuntu1.52.2.4-1ubuntu1.62.2.4-1ubuntu1.6+esm1
2.2.4-1ubuntu1.6+esm2
gnupg2
Ubuntu:Pro:20.04:LTS
 before 2.2.19-3ubuntu2.5+esm1, plus listed versions
2.2.12-1ubuntu32.2.17-3ubuntu12.2.19-3ubuntu22.2.19-3ubuntu2.12.2.19-3ubuntu2.22.2.19-3ubuntu2.42.2.19-3ubuntu2.5
2.2.19-3ubuntu2.5+esm1
gnupg2
Ubuntu:22.04:LTS
 before 2.2.27-3ubuntu2.5, plus listed versions
2.2.20-1ubuntu42.2.27-2ubuntu12.2.27-3ubuntu12.2.27-3ubuntu22.2.27-3ubuntu2.12.2.27-3ubuntu2.32.2.27-3ubuntu2.4
2.2.27-3ubuntu2.5
gnupg2
Ubuntu:24.04:LTS
 before 2.4.4-2ubuntu17.4, plus listed versions
2.2.40-1.1ubuntu12.4.4-2ubuntu72.4.4-2ubuntu152.4.4-2ubuntu162.4.4-2ubuntu172.4.4-2ubuntu17.22.4.4-2ubuntu17.3
2.4.4-2ubuntu17.4
gnupg2
Ubuntu:25.10
 before 2.4.8-2ubuntu2.1, plus listed versions
2.4.4-2ubuntu232.4.4-2ubuntu242.4.7-17ubuntu32.4.8-2ubuntu12.4.8-2ubuntu2
2.4.8-2ubuntu2.1
gpg2
openSUSE:Tumbleweed
 before 2.5.16-1.1
2.5.16-1.1
gpg2
openSUSE:Leap 16.0
 before 2.5.5-160000.3.1
2.5.5-160000.3.1

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-68973 is a high vulnerability (CVSS 7.8) in Gnupg, published December 28, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in gnupg 2.4.9-r0.

References

Show 89 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 13 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open