Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2 | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-dirmngr | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-g13 | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-gpg-agent | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-gpgconf | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-keyboxd | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-scdaemon | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-smime | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-utils | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-verify | 0:2.4.9-5.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | gnupg2-wks | 0:2.4.9-5.1.hum1 |
Vulnerabilities 1
-
Medium 5.9
In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modifie…
References
-
article
https://images.redhat.com/
-
report
https://access.redhat.com/security/cve/CVE-2025-68972
-
article
https://access.redhat.com/security/updates/classification/
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7458.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2425646
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-68972
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-68972
-
article
https://gpg.fail/formfeed
-
article
https://news.ycombinator.com/item?id=46404339