Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-68973

Fixed in a distro release EPSS <1%CVSS 7.8

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Published 2025-12-28 · CVE record · OSV

Products: gnupg

Distro releases

ReleasePackageFixed in
AlmaLinux 10gnupg22.4.5-3.el10_1
AlmaLinux 10gnupg2-smime2.4.5-3.el10_1
AlmaLinux 8gnupg22.2.20-4.el8_10
AlmaLinux 8gnupg2-smime2.2.20-4.el8_10
AlmaLinux 9gnupg22.3.3-5.el9_7
AlmaLinux 9gnupg2-smime2.3.3-5.el9_7
Alpine 3.20gnupg2.4.9-r0
Alpine 3.21gnupg2.4.9-r0
Alpine 3.22gnupg2.4.9-r0
Alpine 3.23gnupg2.4.9-r0
Alpine 3.24gnupg2.4.9-r0
Amazon Linux 2gnupg22.0.22-5.amzn2.0.6
Amazon Linux 2gnupg2-smime2.0.22-5.amzn2.0.6
Amazon Linux 2023gnupg22.3.7-1.amzn2023.0.6
Amazon Linux 2023gnupg2-minimal2.3.7-1.amzn2023.0.6
Amazon Linux 2023gnupg2-smime2.3.7-1.amzn2023.0.6
Debian 11gnupg22.2.27-2+deb11u3
Debian 12gnupg22.2.40-1.1+deb12u2
Debian 13gnupg22.4.7-21+deb13u1
Debian 14gnupg22.4.8-5
Red Hat Enterprise Linux 10.1gnupg20:2.4.5-3.el10_1
Red Hat Enterprise Linux 10.1gnupg2-debuginfo0:2.4.5-3.el10_1
Red Hat Enterprise Linux 10.1gnupg2-debugsource0:2.4.5-3.el10_1
Red Hat Enterprise Linux 10.1gnupg2-smime0:2.4.5-3.el10_1
Red Hat Enterprise Linux 10.1gnupg2-smime-debuginfo0:2.4.5-3.el10_1
Red Hat Enterprise Linux 8gnupg20:2.2.20-4.el8_10
Red Hat Enterprise Linux 8gnupg2-debuginfo0:2.2.20-4.el8_10
Red Hat Enterprise Linux 8gnupg2-debugsource0:2.2.20-4.el8_10
Red Hat Enterprise Linux 8gnupg2-smime0:2.2.20-4.el8_10
Red Hat Enterprise Linux 8gnupg2-smime-debuginfo0:2.2.20-4.el8_10
Red Hat Enterprise Linux 9gnupg20:2.3.3-5.el9_7
Red Hat Enterprise Linux 9gnupg2-debuginfo0:2.3.3-5.el9_7
Red Hat Enterprise Linux 9gnupg2-debugsource0:2.3.3-5.el9_7
Red Hat Enterprise Linux 9gnupg2-smime0:2.3.3-5.el9_7
Red Hat Enterprise Linux 9gnupg2-smime-debuginfo0:2.3.3-5.el9_7
Red Hat Enterprise Linux eus 10.0gnupg20:2.4.5-2.el10_0.1
Red Hat Enterprise Linux eus 10.0gnupg2-debuginfo0:2.4.5-2.el10_0.1
Red Hat Enterprise Linux eus 10.0gnupg2-debugsource0:2.4.5-2.el10_0.1
Red Hat Enterprise Linux eus 10.0gnupg2-smime0:2.4.5-2.el10_0.1
Red Hat Enterprise Linux eus 10.0gnupg2-smime-debuginfo0:2.4.5-2.el10_0.1
Red Hat rhel aus 8.2gnupg20:2.2.9-1.el8_2.1
Red Hat rhel aus 8.2gnupg2-smime0:2.2.9-1.el8_2.1
Red Hat rhel aus 8.4gnupg20:2.2.20-2.el8_4.1
Red Hat rhel aus 8.4gnupg2-smime0:2.2.20-2.el8_4.1
Red Hat rhel aus 8.6gnupg20:2.2.20-3.el8_6.1
Red Hat rhel aus 8.6gnupg2-smime0:2.2.20-3.el8_6.1
Red Hat rhel e4s 8.6gnupg20:2.2.20-3.el8_6.1
Red Hat rhel e4s 8.6gnupg2-smime0:2.2.20-3.el8_6.1
Red Hat rhel e4s 8.8gnupg20:2.2.20-3.el8_8.1
Red Hat rhel e4s 8.8gnupg2-smime0:2.2.20-3.el8_8.1
Red Hat rhel e4s 9.0gnupg20:2.3.3-2.el9_0.1
Red Hat rhel e4s 9.0gnupg2-debuginfo0:2.3.3-2.el9_0.1
Red Hat rhel e4s 9.0gnupg2-debugsource0:2.3.3-2.el9_0.1
Red Hat rhel e4s 9.0gnupg2-smime0:2.3.3-2.el9_0.1
Red Hat rhel e4s 9.0gnupg2-smime-debuginfo0:2.3.3-2.el9_0.1
Red Hat rhel e4s 9.2gnupg20:2.3.3-2.el9_2.1
Red Hat rhel e4s 9.2gnupg2-debuginfo0:2.3.3-2.el9_2.1
Red Hat rhel e4s 9.2gnupg2-debugsource0:2.3.3-2.el9_2.1
Red Hat rhel e4s 9.2gnupg2-smime0:2.3.3-2.el9_2.1
Red Hat rhel e4s 9.2gnupg2-smime-debuginfo0:2.3.3-2.el9_2.1
Red Hat rhel els 7gnupg20:2.0.22-5.el7_9.1
Red Hat rhel els 7gnupg2-debuginfo0:2.0.22-5.el7_9.1
Red Hat rhel els 7gnupg2-smime0:2.0.22-5.el7_9.1
Red Hat rhel eus 9.4gnupg20:2.3.3-4.el9_4.1
Red Hat rhel eus 9.4gnupg2-smime0:2.3.3-4.el9_4.1
Red Hat rhel eus 9.6gnupg20:2.3.3-4.el9_6.1
Red Hat rhel eus 9.6gnupg2-smime0:2.3.3-4.el9_6.1
Red Hat rhel eus long life 8.4gnupg20:2.2.20-2.el8_4.1
Red Hat rhel eus long life 8.4gnupg2-smime0:2.2.20-2.el8_4.1
Red Hat rhel tus 8.6gnupg20:2.2.20-3.el8_6.1
Red Hat rhel tus 8.6gnupg2-smime0:2.2.20-3.el8_6.1
Red Hat rhel tus 8.8gnupg20:2.2.20-3.el8_8.1
Red Hat rhel tus 8.8gnupg2-smime0:2.2.20-3.el8_8.1
Rocky Linux 10gnupg20:2.4.5-3.el10_1
Rocky Linux 8gnupg20:2.2.20-4.el8_10
Rocky Linux 9gnupg20:2.3.3-5.el9_7
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSgpg22.2.27-150300.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSgpg22.2.27-150300.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSgpg22.2.27-150300.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSgpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Micro 5.2gpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Micro 5.3gpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Micro 5.4gpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Micro 5.5gpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Module for Basesystem 15 SP7gpg22.4.4-150600.3.12.1
SUSE Linux Enterprise Server 12 SP5-LTSSgpg22.0.24-9.17.1
SUSE Linux Enterprise Server 15 SP4-LTSSgpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Server 15 SP5-LTSSgpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSSgpg22.4.4-150600.3.12.1
SUSE Linux Enterprise Server 16.0gpg22.5.5-160000.3.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5gpg22.0.24-9.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4gpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5gpg22.2.27-150300.3.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6gpg22.4.4-150600.3.12.1
SUSE Linux Enterprise Server for SAP applications 16.0gpg22.5.5-160000.3.1
SUSE Linux Micro 6.0gpg22.4.4-6.1
SUSE Linux Micro 6.1gpg22.4.4-slfo.1.1_6.1
SUSE Linux Micro 6.2gpg22.5.5-160000.3.1
Ubuntu 22.04 LTSgnupg22.2.27-3ubuntu2.5
Ubuntu 24.04 LTSgnupg22.4.4-2ubuntu17.4
Ubuntu 25.10gnupg22.4.8-2ubuntu2.1
Ubuntu Pro 14.04 LTSgnupg1.4.16-1ubuntu2.6+esm2
Ubuntu Pro 16.04 LTSgnupg1.4.20-1ubuntu3.3+esm3
Ubuntu Pro 16.04 LTSgnupg22.1.11-6ubuntu2.1+esm3
Ubuntu Pro 18.04 LTSgnupg22.2.4-1ubuntu1.6+esm2
Ubuntu Pro 20.04 LTSgnupg22.2.19-3ubuntu2.5+esm1
openSUSE Leap 15.6gpg22.4.4-150600.3.12.1
openSUSE Leap 16.0gpg22.5.5-160000.3.1
openSUSE Tumbleweedgpg22.5.16-1.1