ROOT-OS-DEBIAN-13-CVE-2025-68972 CVE-2025-68972 in rootio-gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the rootio-gnupg2 package for Root:Debian:13. Multiple fixed versions available...

AZL-73911 CVE-2025-68972 affecting package gnupg2 2.4.0-3

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...