[Pkg-gnupg-maint] [SRM] Update of gnupg/gnupg2 to fix a memory leak

Daniel Leidert daniel.leidert.spam at gmx.net
Mon May 25 00:25:13 UTC 2009


Am Sonntag, den 24.05.2009, 19:37 +0200 schrieb Luk Claes:
> Daniel Leidert wrote:
> > Hi,
> > 
> > In the past it had been reported several times, that importing a large
> > keyring (for example the Debian keyring) might need a really long time
> > and make gnupg allocate much memory (trying to reproduce the issue I
> > observed a DoS). I recently reported the issue to Werner Koch and he
> > found a memory leak and fixed the issue. It seems the patch applies to
> > gnupg (probably to 1.4.6 in oldstable too) as well as gnupg2.
> > 
> > Should this be fixed in stable and olstable? Then I would prepare the
> > packages for gnupg (CCed Eric for gnupg2).
> 
> Please upload for stable and oldstable.

A question: I have another fix I would like to apply. It fixes gnupg to
not leave the terminal in noecho-mode (#321871 [1]). The patch [2] is
pretty small. Any objections?

@Eric: The patch also applies to gnupg2 AFAIK.

[1] http://bugs.debian.org/321871
[2] http://svn.debian.org/wsvn/pkg-gnupg/gnupg/branches/lenny/debian/patches/101_321871_unset_noecho_on_sigint.dpatch

Regards, Daniel




More information about the Pkg-gnupg-maint mailing list