CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,828 indexed, latest versions
Container images: 2,332; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,054 of 17,828 indexed charts deploy, on 2,332 images.

Affected package	Affected versions	Fixed in	Images
gnupg2deb	2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more	2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more	1,898
gnupg2rpm	2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more	0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7	335
gnupgdeb	1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more	1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm3	76
gnupgapk	2.4.5-r0, 2.4.7-r0	2.4.9-r0	15
gpg2rpm	2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.1	2.4.4-150600.3.12.1, 2.5.16-1.1	9

OSV records: ALPINE-CVE-2025-68973 DEBIAN-CVE-2025-68973 RHSA-2026:0719 RHSA-2026:0728 RHSA-2026:1677 RLSA-2026:0719 RLSA-2026:0728 UBUNTU-CVE-2025-68973 DLA-4437-1 openSUSE-SU-2026:10001-1 SUSE-SU-2026:0215-1
Also known as: RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

6,027

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3

Open the chart page →

1,839

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

3,702

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,340

Container images carrying it

2,332 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
netrisai/controller-web-session-generator :0.2.0	a030a31289f4	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
netrisai/mariadb :10.11.4-debian-11-r46	0aa742a0b906	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
networkboot/dhcpd :latest	e99bbfbd6fb2	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	gnupg@1.4.20-1ubuntu3.2	1.4.20-1ubuntu3.3+esm3	1
nirmalnaveen/supermario :latest	8541a39162f3	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
novumrgi/glowroot-central :0.14.0-beta.3	8c54790675b1	gnupg2@2.2.27-2+deb11u1	2.2.27-2+deb11u3	1
nrrrus/nginx-test :latest	5f55cd4ef557	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
nshou/elasticsearch-kibana :kibana7	a1d1e36814d1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
ntakashi/gitana :1.4.0	4171ec641120	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
nvidia/k8s-device-plugin :v0.9.0	964847cc3fd8	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
oamdev/vector-controller :v0.2.3	9dd8be44ffc9	gnupg2@2.2.4-1ubuntu1.6	2.2.4-1ubuntu1.6+esm2	1
obolnetwork/helios :e10e753	cb7e97d39d46	gnupg2@2.4.4-2ubuntu17.2	2.4.4-2ubuntu17.4	1
octoprint/octoprint :1.11.0	912bef0c4e8b	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	gnupg@2.4.5-r0	2.4.9-r0	1
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	gnupg2@2.2.40-1.1+deb12u1	2.2.40-1.1+deb12u2	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
oled01/automx2 :2025.1.1	05d3e398e675	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
oled01/db-backup :0.1.0	6302fd2b5333	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
omecproject/c3po-hss :master-latest	638671ef4842	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.6+esm2	1
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	gnupg2@2.2.4-1ubuntu1.3	2.2.4-1ubuntu1.6+esm2	1
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.6+esm2	1
omecproject/ngic-cp :central-cp-multi-upfs-latest	24a389a0a4fe	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.6+esm2	1
omecproject/onos-progran :1.0.0	5715e5648aa0	gnupg@1.4.20-1ubuntu3.1	1.4.20-1ubuntu3.3+esm3	1
omecproject/openmme :master-latest	64776cb9edb3	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
omkara25/simple-microservice-app-order-service :v2.1	8327546c7aac	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
omkara25/simple-microservice-app-payment-service :v2	afff40172b6b	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
omkara25/simple-microservice-app-user-service :v2	d62cba548580	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
onosproject/onos :2.2.1	44914a8d4b3f	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.6+esm2	1
oomk8s/ubuntu-init :1.0.0	3adf3d21ad3b	gnupg@1.4.20-1ubuntu3.1	1.4.20-1ubuntu3.3+esm3	1
opea/asr :1.0	25dd26d9cd09	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/chatqna :1.0	38c51b791efa	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/codegen :1.0	58f91683892d	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/codegen-ui :1.0	2bee4eb66f3e	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/codetrans :1.0	e2436483b73d	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/codetrans-ui :1.0	3ef121f34610	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/docsum :1.0	3eaa91849512	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/docsum-ui :1.0	7f854e9bffaf	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/guardrails-tgi :1.0	262c6048aab8	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/guardrails-tgi :latest	f68bec6a1271	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/llm-docsum-tgi :1.0	02f9e8fa5d71	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/speecht5 :1.0	249afad3d268	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/tts :1.0	257ae94709e9	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
opea/web-retriever-chroma :1.0	fe08165d7770	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
openbas/caldera-server :5.1.0	a277796d9724	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
openbas/platform :2.0.5	d986d80b0a75	gnupg2@2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	1