[Pkg-gnupg-maint] Bug#739424: gnupg dies with "gpg: out of secure memory [...]" since 1.4.16-1

[Ryan Kavanagh]

Package: gnupg
Version: 1.4.15-3
Severity: important

Hi,

Since gnupg was updated to 1.4.16-1, it fails to sign or decrypt with
the error "gpg: out of secure memory while allocating 640 bytes". I've
using the same key on the same system without issue since 2009, but
since the upgrade to 1.4.16-1, gnupg has become essentially unusable. See
below for an example of the problem; please let me know if I can provide
you with any additional information.

Best wishes,
Ryan

ryan at nu:/tmp$ dpkg --list gnupg | grep ii | gpg --clearsign

You need a passphrase to unlock the secret key for
user: "Ryan Kavanagh <rak at debian.org>"
10240-bit RSA key, ID 4A11C97A, created 2009-09-23

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

ii  gnupg          1.4.16-1     amd64        GNU privacy guard - a free PGP replacement
gpg: out of secure memory while allocating 640 bytes
gpg: (this may be caused by too many secret keys used simultaneously or due to excessive large key sizes)
ryan at nu:/tmp$ wget -q http://snapshot.debian.org/archive/debian/20131220T215322Z/pool/main/g/gnupg/gnupg_1.4.15-3_amd64.deb
ryan at nu:/tmp$ sudo dpkg -i gnupg_1.4.15-3_amd64.deb
[sudo] password for ryan:
dpkg: warning: downgrading gnupg from 1.4.16-1 to 1.4.15-3
(Reading database ... 453599 files and directories currently installed.)
Preparing to unpack gnupg_1.4.15-3_amd64.deb ...
Unpacking gnupg (1.4.15-3) over (1.4.16-1) ...
Setting up gnupg (1.4.15-3) ...
Processing triggers for man-db (2.6.6-1) ...
Processing triggers for install-info (5.2.0.dfsg.1-2) ...
ryan at nu:/tmp$ dpkg --list gnupg | grep ii | gpg --clearsign

You need a passphrase to unlock the secret key for
user: "Ryan Kavanagh <rak at debian.org>"
10240-bit RSA key, ID 4A11C97A, created 2009-09-23

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

ii  gnupg          1.4.15-3     amd64        GNU privacy guard - a free PGP replacement
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)

iQUcBAEBCgAGBQJTA5PEAAoJEI97+PxKEcl6E5AoAKa0kKQ4IDrekP0ucJc7UBUo
[SNIP]
=BtXh
-----END PGP SIGNATURE-----
ryan at nu:/tmp$ gpg --list-key 4A11C97A | grep -v uid
gpg: DBG: locking for `/home/ryan/.gnupg/trustdb.gpg.lock' done via O_EXCL
pub   10240R/4A11C97A 2009-09-23 [expires: 2016-01-25]
sub   10240R/0F5E9C64 2009-09-24 [expires: 2019-09-22]
ryan at nu:/tmp$ ulimit -a
core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 63062
max locked memory       (kbytes, -l) unlimited
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1024
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 95
stack size              (kbytes, -s) 8192
cpu time               (seconds, -t) unlimited
max user processes              (-u) 63062
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.12-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_CA.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnupg depends on:
ii  gpgv          1.4.16-1
ii  libbz2-1.0    1.0.6-5
ii  libc6         2.17-97
ii  libreadline6  6.2+dfsg-0.1
ii  libusb-0.1-4  2:0.1.12-23.3
ii  zlib1g        1:1.2.8.dfsg-1

Versions of packages gnupg recommends:
pn  gnupg-curl     <none>
ii  libldap-2.4-2  2.4.31-1+nmu2+b1

Versions of packages gnupg suggests:
pn  gnupg-doc     <none>
ii  imagemagick   8:6.7.7.10-7
ii  libpcsclite1  1.8.11-1

-- no debconf information

-- 
|_)|_/	Ryan Kavanagh		| Debian Developer
| \| \	http://ryanak.ca/	| GPG Key 4A11C97A
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1876 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20140218/08ce10f8/attachment.sig>