CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,828 indexed, latest versions
Container images: 2,332; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,054 of 17,828 indexed charts deploy, on 2,332 images.

Affected package	Affected versions	Fixed in	Images
gnupg2deb	2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more	2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more	1,898
gnupg2rpm	2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more	0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7	335
gnupgdeb	1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more	1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm3	76
gnupgapk	2.4.5-r0, 2.4.7-r0	2.4.9-r0	15
gpg2rpm	2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.1	2.4.4-150600.3.12.1, 2.5.16-1.1	9

OSV records: ALPINE-CVE-2025-68973 DEBIAN-CVE-2025-68973 RHSA-2026:0719 RHSA-2026:0728 RHSA-2026:1677 RLSA-2026:0719 RLSA-2026:0728 UBUNTU-CVE-2025-68973 DLA-4437-1 openSUSE-SU-2026:10001-1 SUSE-SU-2026:0215-1
Also known as: RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

6,027

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3

Open the chart page →

1,839

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

3,702

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,340

Container images carrying it

2,332 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
phan2410/dummy-service :0.0.8	9c6ed6de26ca	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
phan2410/falcon-asgi-server :0.1.0	4a86d138832d	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
phntom/binaryvision-tlo-static :0.0.4	e8b9ac93a3dd	gnupg2@2.2.27-2+deb11u1	2.2.27-2+deb11u3	1
phntom/email-manager :0.1.22	d8e2a9f2f085	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
phntom/mattermost-defaultbackend :6.4.0	c318dc90a4bf	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
photoprism/photoprism :220629-jammy	2954334adbda	gnupg2@2.2.27-3ubuntu2	2.2.27-3ubuntu2.5	1
photoprism/photoprism :251130	db16ee6b1ba3	gnupg2@2.4.8-2ubuntu2	2.4.8-2ubuntu2.1	1
photoprism/photoprism :240711-ce	fc6fd632ca74	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
phpmyadmin/phpmyadmin :5.1	38437e021deb	gnupg2@2.2.27-2+deb11u1	2.2.27-2+deb11u3	1
phpmyadmin/phpmyadmin :5.2.3	42a200db07b4	gnupg2@2.4.7-21+b3	2.4.7-21+deb13u1	1
pihole/pihole :2023.05.0	b83258064f54	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
pk910/powfaucet :v2-stable	3dcae6a62896	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
platform9community/admin-server :latest	de3fa9b70df1	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
platform9community/api-gateway :latest	40a4970de568	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
platform9community/customers-service :latest	2089811e5cc6	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
platform9community/vets-service :latest	d1165c94dfb3	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
platform9community/visits-service :latest	8d11b50368c6	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
plexinc/pms-docker :1.25.4.5487-648a8f9f9	46ea59b96f2b	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
plexinc/pms-docker :1.19.5.3112-b23ab3896	b598abb134ad	gnupg@1.4.20-1ubuntu3.3	1.4.20-1ubuntu3.3+esm3	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	gnupg2@2.2.9-1.el8	0:2.2.20-4.el8_10	1
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10	1
pococze/python-hello-elos :2.0.0	7a1aab425e51	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
pozetroninc/keydb :v6.0.16	53ae64f29da8	gnupg2@2.2.4-1ubuntu1.3	2.2.4-1ubuntu1.6+esm2	1
pposkrobko/risk-advisor :v1.0.0	eaf260341dba	gnupg@1.4.20-1ubuntu3.1	1.4.20-1ubuntu3.3+esm3	1
praravind1801/helmimages :3.0.0	f29d637b9ce1	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
prefecthq/prefect :2.20.4-python3.10	1df4b5b6238a	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
prodrigestivill/postgres-backup-local :latest	f70742ebe42b	gnupg2@2.4.7-21+b3	2.4.7-21+deb13u1	1
project2team4/react :latest	3ff031a08887	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
promzeus/redis-sentinel-gateway :v1	82f6d56e280b	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
proxysql/proxysql :2.5.5	37eb7e46d947	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
proxysql/proxysql :2.3.0	8d710e80c77b	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
proxysql/proxysql :2.7.3	a4d6c35c2949	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
pschichtel/mindustry-server :v145.1	b543e9c2d371	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
psorab/elibrary :latest	53b68896c4ce	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
ptthanh1511/daloradius :1.2-dev	afecc5143fcb	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
puppet/puppet-agent :7.14.0	0b6fd9a6b7da	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2	1
pysga1996/redis :latest	3af6d0c7db19	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
qdrant/qdrant :v1.7.4	5f2a56b95266	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
qdrant/qdrant :v1.4.1	66ee661d5241	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
quickwit/quickwit :v0.8.1	d29332bdadcc	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
qumine/minecraft-server :v0.1.15	c0b650d51132	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
qxip/qryn :3.2.39	77acc9c7a9fd	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
rabeh/apibootspring :1.0	941007b6946e	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
radarbase/radar-push-endpoint :0.4.0	e1758508e033	gnupg2@2.4.4-2ubuntu17.2	2.4.4-2ubuntu17.4	1