CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,828 indexed, latest versions
Container images: 2,332; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,054 of 17,828 indexed charts deploy, on 2,332 images.

Affected package	Affected versions	Fixed in	Images
gnupg2deb	2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more	2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more	1,898
gnupg2rpm	2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more	0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7	335
gnupgdeb	1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more	1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm3	76
gnupgapk	2.4.5-r0, 2.4.7-r0	2.4.9-r0	15
gpg2rpm	2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.1	2.4.4-150600.3.12.1, 2.5.16-1.1	9

OSV records: ALPINE-CVE-2025-68973 DEBIAN-CVE-2025-68973 RHSA-2026:0719 RHSA-2026:0728 RHSA-2026:1677 RLSA-2026:0719 RLSA-2026:0728 UBUNTU-CVE-2025-68973 DLA-4437-1 openSUSE-SU-2026:10001-1 SUSE-SU-2026:0215-1
Also known as: RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

6,027

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3

Open the chart page →

1,839

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

3,702

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,340

Container images carrying it

2,332 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
gchq/accumulo :2.0.1	c460bb587d6d	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
gdrocha/togglr-backend :1.0.0	d5ae64e83d4c	gnupg@2.4.7-r0	2.4.9-r0	1
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	gnupg2@2.2.4-1ubuntu1.6	2.2.4-1ubuntu1.6+esm2	1
geopython/pycsw :3.0.0-beta2	84662ea6b78b	gnupg2@2.2.40-1.1+deb12u1	2.2.40-1.1+deb12u2	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.6+esm2	1
geoservercloud/geoserver-cloud-gateway :1.0-RC2	ca58b74529cd	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
geoservercloud/geoserver-cloud-rest :1.0-RC2	5dc0c93a1710	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
geoservercloud/geoserver-cloud-wcs :1.0-RC2	47ae1bdb4bcc	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
geoservercloud/geoserver-cloud-webui :1.0-RC2	28c3e5a8c5a3	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
geoservercloud/geoserver-cloud-wfs :1.0-RC2	8c70ee06d5ab	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
geoservercloud/geoserver-cloud-wms :1.0-RC2	42775ba6a4da	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
gethue/hue :4.11.0	11b649636e68	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
gethue/hue :4.10.0	5702b2c37ff9	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
getsentry/relay :24.10.0	ba7bf9163219	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
gitea/gitea :1.22.3	76f516a1a8c2	gnupg@2.4.5-r0	2.4.9-r0	1
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
glasskube/operator :0.12.2	be5133100d63	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	gnupg2@2.2.27-3ubuntu2.3	2.2.27-3ubuntu2.5	1
golenski/db-init :1.0.0	86ca17cd3063	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
golenski/fibonacci-msg-relay :1.0.0	c863dcb0c513	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
golenski/fibonacci-task-manager :2.0.0	3a2b36df247b	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
golenski/fibonacci-worker :2.0.0	954caf4aaf6a	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
gopaddle/gopaddle :5.0	435359250b63	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
gophish/gophish :0.12.1	8a57cd171999	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
gopinatht/ovs-plugin-installer :latest	632cb2e9c399	gnupg@1.4.20-1ubuntu3.1	1.4.20-1ubuntu3.3+esm3	1
gotenberg/gotenberg :8.0.1	cf0b9a7ca3cf	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
gotify/server :2.1.4	09c79bc1e403	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
gotson/komga :0.99.4	9b15ea6bfc30	gnupg2@2.2.4-1ubuntu1.3	2.2.4-1ubuntu1.6+esm2	1
gradiant/hdfs :3.2.2	e3bf364fe713	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
gradiant/open5gs-dbctl :0.10.3	332031245fce	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
grafana/agent :v0.44.2	3364714a2f64	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
grafana/alloy :v1.5.1	01a63f4e032c	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
grafana/alloy :v1.4.3	06bdcbb51fc2	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
grafana/alloy :v1.11.3	8c7256f412fe	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	1
grafana/beyla :1.3.3	36d07f8d276e	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
grafana/fluent-plugin-loki :latest	4f0438bdebb5	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
grafana/promtail :2.6.1	072527b12cdf	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
grafana/promtail :2.9.10	63a2e57a5b14	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
grafana/promtail :3.5.1	65bfae480b57	gnupg2@2.4.4-2ubuntu17.2	2.4.4-2ubuntu17.4	1
grafana/promtail :3.6.1	8dcfdf466da0	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	1
grafana/promtail :2.7.0	c16c710f7333	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
graphprotocol/graph-node :latest	b0436347fb24	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
graphprotocol/graph-node :v0.37.0	f4452cdedd68	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
graylog/graylog :6.1.10	19de1aff48c2	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
gresearchdev/siembol-config-editor-rest :latest	91863a50afb7	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
gresearchdev/siembol-storm-topology-manager :latest	8dad36a05ebf	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
grpl/grapple-cli :0.2.127	c00aafee6629	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
guacamole/guacamole :1.5.5	0f62f6d17ab3	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
guillh/web3-prometheus-exporter :0.3.0	4fb99dbc32b2	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
gulacedia/web-dvwa-new :v3	67b467d961ca	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1