CVE-2025-68972

Name of the Vulnerable Software and Affected Versions GnuPG versions through 2.4.8

Description The software is susceptible to a signature verification bypass. If a signed message includes the character 'f' at the end of a plaintext line, an attacker can modify the message to add text after the signed content. Despite this modification, signature verification may succeed, although an "invalid armor" message might be displayed during the verification process. This issue is related to the use of 'f' as a marker to indicate the truncation of long plaintext lines.

Recommendations Update GnuPG to a version newer than 2.4.8.