[Pkg-gnupg-maint] [SRM] Update of gnupg/gnupg2 to fix a memory leak

Luk Claes luk at debian.org
Thu May 28 16:38:51 UTC 2009


Daniel Leidert wrote:
> Am Sonntag, den 24.05.2009, 19:37 +0200 schrieb Luk Claes:
>> Daniel Leidert wrote:
>>> Hi,
>>>
>>> In the past it had been reported several times, that importing a large
>>> keyring (for example the Debian keyring) might need a really long time
>>> and make gnupg allocate much memory (trying to reproduce the issue I
>>> observed a DoS). I recently reported the issue to Werner Koch and he
>>> found a memory leak and fixed the issue. It seems the patch applies to
>>> gnupg (probably to 1.4.6 in oldstable too) as well as gnupg2.
>>>
>>> Should this be fixed in stable and olstable? Then I would prepare the
>>> packages for gnupg (CCed Eric for gnupg2).
>> Please upload for stable and oldstable.
> 
> A question: I have another fix I would like to apply. It fixes gnupg to
> not leave the terminal in noecho-mode (#321871 [1]). The patch [2] is
> pretty small. Any objections?

Except for the spelling error in Werner Koch's name, I have no 
objections :-)

Cheers

Luk



More information about the Pkg-gnupg-maint mailing list