CVE-2025-68973

High

Advisory

Published 28 Dec 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,828 indexed, latest versions
Container images: 2,332; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: gnupg2 security update

Carried by container images the latest versions of 2,054 of 17,828 indexed charts deploy, on 2,332 images.

Affected package	Affected versions	Fixed in	Images
gnupg2deb	2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+23 more	2.1.11-6ubuntu2.1+esm3, 2.2.4-1ubuntu1.6+esm2, 2.2.19-3ubuntu2.5+esm1, 2.2.27-2+deb11u3+5 more	1,898
gnupg2rpm	2.0.22-5.el7_5, 2.2.9-1.el8, 2.2.20-2.el8, 2.2.20-3.el8_6+2 more	0:2.0.22-5.el7_9.1, 0:2.2.20-4.el8_10, 0:2.3.3-5.el9_7	335
gnupgdeb	1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more	1.4.16-1ubuntu2.6+esm2, 1.4.20-1ubuntu3.3+esm3	76
gnupgapk	2.4.5-r0, 2.4.7-r0	2.4.9-r0	15
gpg2rpm	2.2.5-lp151.6.3.1, 2.2.5-lp152.8.8, 2.4.4-150600.3.9.1	2.4.4-150600.3.12.1, 2.5.16-1.1	9

OSV records: ALPINE-CVE-2025-68973 DEBIAN-CVE-2025-68973 RHSA-2026:0719 RHSA-2026:0728 RHSA-2026:1677 RLSA-2026:0719 RLSA-2026:0728 UBUNTU-CVE-2025-68973 DLA-4437-1 openSUSE-SU-2026:10001-1 SUSE-SU-2026:0215-1
Also known as: RHSA-2026:0935, RHSA-2026:0974, RHSA-2026:1014, RHSA-2026:1229, RHSA-2026:1230, RHSA-2026:1468, RHSA-2026:1705, USN-7946-1, USN-7946-2

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

6,027

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3

Open the chart page →

1,839

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10

Open the chart page →

3,702

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-68973.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnupg2@2.2.4-1ubuntu1.4	2.2.4-1ubuntu1.6+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1

Open the chart page →

9,340

Container images carrying it

2,332 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	gnupg2@2.3.3-4.el9	0:2.3.3-5.el9_7	2
1dev/server :11.9.0	cd5b12fe5471	gnupg2@2.4.4-2ubuntu17.2	2.4.4-2ubuntu17.4	1
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	gnupg2@2.2.19-3ubuntu2.2	2.2.19-3ubuntu2.5+esm1	1
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	gnupg2@2.2.4-1ubuntu1.2	2.2.4-1ubuntu1.6+esm2	1
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
aboogie/login_test_backend :new	9c41a4483ac8	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
activepieces/activepieces :0.28.0	a12efde0c535	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
activepieces/activepieces :0.23.0	c26188b44e62	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
actualbudget/actual-server :25.3.1	58fecd9088b7	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
adagber/planner :v1.0	e5c1ed097752	gnupg2@2.2.27-2+deb11u1	2.2.27-2+deb11u3	1
adityaprasadpathak/myapp :3.0	7e3b9777362c	gnupg2@2.2.27-2+deb11u1	2.2.27-2+deb11u3	1
adolfintel/speedtest :latest	1f828fe83374	gnupg2@2.2.27-2	2.2.27-2+deb11u3	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	gnupg2@2.2.19-3ubuntu2	2.2.19-3ubuntu2.5+esm1	1
aeron/ikev2-strongswan-vpn :23.0	b48f25541f79	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
ahmetfurkandemir/iceberg-rest-fixture-postgresql :1.10.0	142231a0b8b7	gnupg2@2.2.27-3ubuntu2.4	2.2.27-3ubuntu2.5	1
aibrix/metadata-service :v0.7.0	63fb81a64377	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
aidasi/swpapi :v1-1-net6-k8s-test-beta	838b5e2080bc	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
aidasi/swpbom :v1-1-net6-k8s-test-beta	fee6857b9bc9	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
aidasi/swpgateway :v1-1-net6-k8s-test-beta	5ce8dbff7fdc	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
aidasi/swpidentity :v1-1-net6-k8s-test-beta	d433285c7d5a	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
aidasi/swpspa :v1-1-net6-k8s-test-beta	dee4ec566312	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
airbyte/manifest-server :7.28.2	deec511b51c3	gnupg2@2.2.40-1.1+deb12u1	2.2.40-1.1+deb12u2	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1	1
akaunting/akaunting :3.0.15	52811b36ec3a	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
akeyless/base-rhel :0.0.1	4ba8900a0061	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10	1
allegroai/clearml :2.0.0-613	713ae38f7daf	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	gnupg2@2.2.4-1ubuntu1.5	2.2.4-1ubuntu1.6+esm2	1
allegroai/clearml-serving-inference :1.3.0	fca885e8cfc6	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
allegroai/clearml-serving-statistics :1.3.0	c58d9da7bdf8	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
alpine/git :2.47.2	062a01ad7a0e	gnupg@2.4.7-r0	2.4.9-r0	1
alpine/git :v2.49.1	c0280cf95723	gnupg@2.4.7-r0	2.4.9-r0	1
alquimiaai/studio :certification	38a1f0341982	gnupg2@2.3.3-4.el9	0:2.3.3-5.el9_7	1
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10	1
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10	1
altinity/clickhouse-operator :0.16.1	db7dde971407	gnupg2@2.0.22-5.el7_5	0:2.0.22-5.el7_9.1	1
altinity/clickhouse-server :25.3.6.10034.altinitystable	3396b15c51a2	gnupg2@2.2.27-3ubuntu2.4	2.2.27-3ubuntu2.5	1
altinity/metrics-exporter :0.20.0	1a46d104406d	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	gnupg2@2.0.22-5.el7_5	0:2.0.22-5.el7_9.1	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	gnupg2@2.2.20-2.el8	0:2.2.20-4.el8_10	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	gnupg2@2.2.9-1.el8	0:2.2.20-4.el8_10	1
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3	1
andrewgaul/s3proxy :sha-85b0f98	7dc1d34174a5	gnupg2@2.4.4-2ubuntu17	2.4.4-2ubuntu17.4	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	gnupg2@2.2.27-3ubuntu2.4	2.2.27-3ubuntu2.5	1
andrianrf/backoffice :latest	047a7837651e	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10	1
andrianrf/backoffice-be :latest	6036614803d4	gnupg2@2.3.3-2.el9_0	0:2.3.3-5.el9_7	1