Skip to content
OpenAdvisories
High RHSA-2026:1014 1 CVE

Red Hat Security Advisory: gnupg2 security update

Published Jan 23, 2026 · Updated Nov 14, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::baseos gnupg2 0:2.2.20-2.el8_4.1
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::baseos gnupg2-smime 0:2.2.20-2.el8_4.1
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::baseos gnupg2 0:2.2.20-2.el8_4.1
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::baseos gnupg2-smime 0:2.2.20-2.el8_4.1

Vulnerabilities 1

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2425966
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1014.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-68973
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68973
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68973
  • article
    https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306
  • article
    https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9
  • article
    https://gpg.fail/memcpy
  • article
    https://news.ycombinator.com/item?id=46403200
  • article
    https://www.openwall.com/lists/oss-security/2025/12/28/5