TI-2025-42428 CVE-2025-68972 · GHSA-w789-3q45-984r
Improper signature verification in GnuPG
Priority MEDIUM 60
In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of…