CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,828 indexed, latest versions
Container images: 2,332; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,054 of 17,828 indexed charts deploy, on 2,332 images.

Affected package	Affected versions	Fixed in	Images
gnupg2deb	2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more	2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more	1,898
gnupg2rpm	2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more	0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7	335
gnupgdeb	1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more	1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm3	76
gnupgapk	2.4.5-r0, 2.4.7-r0	2.4.9-r0	15
gpg2rpm	2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.1	2.4.4-150600.3.12.1, 2.5.16-1.1	9

OSV records: ALPINE-CVE-2025-68973 DEBIAN-CVE-2025-68973 RHSA-2026:0719 RHSA-2026:0728 RHSA-2026:1677 RLSA-2026:0719 RLSA-2026:0728 UBUNTU-CVE-2025-68973 DLA-4437-1 openSUSE-SU-2026:10001-1 SUSE-SU-2026:0215-1
Also known as: RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

6,027

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3

Open the chart page →

1,839

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

3,702

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,340

Container images carrying it

2,332 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
iomesh/node-disk-manager :1.8.0-2	292ad270082e	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
iomesh/node-disk-operator :1.8.0	f6c76380db34	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
ispras/svacer :11-2-0	42aa9fa9f189	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
istio/examples-helloworld-v1 :latest	328b237e4fb1	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
istio/examples-helloworld-v2 :latest	0a7f02b2c7c9	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
istio/install-cni :1.10.3	2232f365aed6	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
istio/install-cni :1.23.6	ab34c4740f44	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
istio/node-agent-k8s :1.2.9	268ab879ea51	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
istio/operator :1.10.3	655eefa11c84	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
istio/operator :1.12.0	6cfce8a071b9	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
istio/operator :1.18.2	70f9d1fe5fff	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
istio/pilot :1.10.0	294ca55bd1cc	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
istio/pilot :1.23.6	9c3d6a218181	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
istio/pilot :1.16.0	ac0284d75ec9	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
istio/pilot :1.2.9	c09319753454	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
istio/pilot :1.17.1	ce9d87606701	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
istio/pilot :1.15.2	db08d6963975	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
istio/pilot :1.10.3	e7e110a421c2	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
istio/proxyv2 :1.2.9	0c78be035e98	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
istio/proxyv2 :1.9.6	87a9db561d2e	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
istio/proxyv2 :1.10.0	88c6c693e67a	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
istio/proxyv2 :1.14.1	df69c1a7af7c	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
istio/ztunnel :1.25.0	05f3972d80a9	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
jacobalberty/unifi :v7.1.66	4a3616625dda	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
jacobalberty/unifi :v7.4.162	b3edc809a3ff	gnupg2@2.2.4-1ubuntu1.6	2.2.4-1ubuntu1.6+esm2	1
jacobalberty/unifi :5.10.19	c409924e2463	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
jaedb/iris :latest	048cfbf58d57	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
jakowenko/double-take :1.6.0	b858bac9e32a	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
jamoos/kweather :history	163e2e8a6e87	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
janzo83/serviceexample :latest	fb3c4ac36f3e	gnupg2@2.2.40-1.1+deb12u1	2.2.40-1.1+deb12u2	1
jedi132000/nextapp :latest	dc2a81e92f23	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
jellyfin/jellyfin :10.8.13	05a9734d7e83	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
jellyfin/jellyfin :10.10.3	17c3a8d9dddb	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
jellyfin/jellyfin :10.9.10	79fb3d73a3e9	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
jellyfin/jellyfin :10.10.7	7ae36aab93ef	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
jellyfin/jellyfin :10.10.6	96b09723b22f	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
jellyfin/jellyfin :10.8.1	ee24f4459a40	gnupg2@2.2.27-2+deb11u1	2.2.27-2+deb11u3	1
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
jenkins/jenkins :2.440.3-jdk17	de4fea113221	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
jhipster/jhipster-registry :latest	7184525acd4d	gnupg2@2.2.19-3ubuntu2.4	2.2.19-3ubuntu2.5+esm1	1
jhoncytech/bookworm-apache-wordpress :latest	18c3ca1f411e	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1