https://seclists.org/oss-sec/2025/q4/311: Many vulnerabilities in GnuPG
Published Dec 29, 2025
·Updated
Affected Software
1 affected component
gnupg GnuPG
Frequently Asked Questions
1
What is the severity of CVE-2025-68972?
The severity of CVE-2025-68972 is classified as moderate.
2
How do I fix CVE-2025-68972?
To fix CVE-2025-68972, update to the latest version of GnuPG where the vulnerability is addressed.
3
What does CVE-2025-68972 affect?
CVE-2025-68972 affects GnuPG and is related to cleartext signature plaintext truncation for hash calculation.
4
Are there any workarounds for CVE-2025-68972?
Currently, there are no recommended workarounds for CVE-2025-68972 aside from updating GnuPG.
5
When was CVE-2025-68972 published?
CVE-2025-68972 was published on December 29, 2025.