[Pkg-gnupg-maint] Bug#739424: gnupg dies with "gpg: out of secure memory [...]" since 1.4.16-1

[Marc Lehmann]

Package: gnupg
Version: 1.4.16-1.1
Followup-For: Bug #739424

Dear Maintainer,

I suffer from the same problem with a 15424 bit rsa key, which makes gnupg
essentially unusable as well.

As for Werner Koch calling these key sizes stupid, the recommended RSA key
size for the "forseeable future, good protection against quantum computers
using Shor's algorithm" according to ECRYPT II 2012 is indeed 15424 bits
(http://www.keylength.com/en/3/), so it seems quite a few crypto exyperts
disagree with him here.

NIST 2012 also recommends similar key sizes (15360 bits).

It is also against the GNU coding standards to have arbitrary limits such
as these. ("Avoid arbitrary limits on the length or number of any data
structure, including file names, lines, files, and symbols, by allocating
all data structures dynamically. In most Unix utilities, “long lines are
silently truncated”. This is not acceptable in a GNU utility").

In think debian should fix this bug, even if the upstream author is
stubborn about it. Especially if there are no known arguments speaking
against it.

-- System Information:
Debian Release: 7.5
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'unstable'), (500, 'testing'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.1-031601-generic (SMP w/12 CPU cores)
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gnupg depends on:
ii  gpgv          1.4.12-7+deb7u4
ii  libbz2-1.0    1.0.6-5
ii  libc6         2.19-1
ii  libreadline6  6.2+dfsg-0.1
ii  libusb-0.1-4  2:0.1.12-23.3
ii  zlib1g        1:1.2.7.dfsg-13

Versions of packages gnupg recommends:
pn  gnupg-curl     <none>
ii  libldap-2.4-2  2.4.31-1+nmu2

Versions of packages gnupg suggests:
pn  gnupg-doc     <none>
ii  imagemagick   8:6.7.7.10-5+deb7u3
ii  libpcsclite1  1.8.11-3

-- no debconf information

-- debsums errors found:
prelink: /opt/bin/leaplogin: Could not find one of the dependencies
prelink: /opt/bin/dasdcat: Could not find one of the dependencies
prelink: /opt/bin/gvpectrl.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/bin/dasdls: Could not find one of the dependencies
prelink: /opt/bin/hercifc: Could not find one of the dependencies
prelink: /opt/bin/hetget: Could not find one of the dependencies
prelink: /opt/bin/cckddiag: Could not find one of the dependencies
prelink: /opt/bin/netscape: Could not find one of the dependencies
prelink: /opt/bin/cem: Could not find one of the dependencies
prelink: /opt/bin/shgenSBRDF: Could not find one of the dependencies
prelink: /opt/bin/Grimrock: Could not find one of the dependencies
prelink: /opt/bin/cckdswap: Could not find one of the dependencies
prelink: /opt/bin/cadaverserver: Could not find one of the dependencies
prelink: /opt/bin/catrats: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcomp: Could not find one of the dependencies
prelink: /opt/bin/tapecopy: Could not find one of the dependencies
prelink: /opt/bin/dasdseq: Could not find one of the dependencies
prelink: /opt/bin/pakx: Could not find one of the dependencies
prelink: /opt/bin/dasdisup: Could not find one of the dependencies
prelink: /opt/bin/tapesplt: Could not find one of the dependencies
prelink: /opt/bin/dasdinit: Could not find one of the dependencies
prelink: /opt/bin/cadaverspyboss: Could not find one of the dependencies
prelink: /opt/bin/hercules: Could not find one of the dependencies
prelink: /opt/bin/shrike: Could not find one of the dependencies
prelink: /opt/bin/hetmap: Could not find one of the dependencies
prelink: /opt/bin/dmap2hrc: Could not find one of the dependencies
prelink: /opt/bin/shgenmap: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcdsk: Could not find one of the dependencies
prelink: /opt/bin/dasdload: Could not find one of the dependencies
prelink: /opt/bin/ccgo: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/shgencubemap: Could not find one of the dependencies
prelink: /opt/bin/hetinit: Could not find one of the dependencies
prelink: /opt/bin/ndump: Could not find one of the dependencies
prelink: /opt/bin/dasdpdsu: Could not find one of the dependencies
prelink: /opt/bin/tapemap: Could not find one of the dependencies
prelink: /opt/bin/pakc: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/nstats: Could not find one of the dependencies
prelink: /opt/bin/v4l2info: Could not find one of the dependencies
prelink: /opt/bin/shsparse: Could not find one of the dependencies
prelink: /opt/bin/hetupd: Could not find one of the dependencies
prelink: /opt/bin/gtkpak: Could not find one of the dependencies
prelink: /opt/sbin/gvpe.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/sbin/ssldecode: Could not find one of the dependencies
prelink: /opt/bin/leaplogin: Could not find one of the dependencies
prelink: /opt/bin/dasdcat: Could not find one of the dependencies
prelink: /opt/bin/gvpectrl.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/bin/dasdls: Could not find one of the dependencies
prelink: /opt/bin/hercifc: Could not find one of the dependencies
prelink: /opt/bin/hetget: Could not find one of the dependencies
prelink: /opt/bin/cckddiag: Could not find one of the dependencies
prelink: /opt/bin/netscape: Could not find one of the dependencies
prelink: /opt/bin/cem: Could not find one of the dependencies
prelink: /opt/bin/shgenSBRDF: Could not find one of the dependencies
prelink: /opt/bin/Grimrock: Could not find one of the dependencies
prelink: /opt/bin/cckdswap: Could not find one of the dependencies
prelink: /opt/bin/cadaverserver: Could not find one of the dependencies
prelink: /opt/bin/catrats: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcomp: Could not find one of the dependencies
prelink: /opt/bin/tapecopy: Could not find one of the dependencies
prelink: /opt/bin/dasdseq: Could not find one of the dependencies
prelink: /opt/bin/pakx: Could not find one of the dependencies
prelink: /opt/bin/dasdisup: Could not find one of the dependencies
prelink: /opt/bin/tapesplt: Could not find one of the dependencies
prelink: /opt/bin/dasdinit: Could not find one of the dependencies
prelink: /opt/bin/cadaverspyboss: Could not find one of the dependencies
prelink: /opt/bin/hercules: Could not find one of the dependencies
prelink: /opt/bin/shrike: Could not find one of the dependencies
prelink: /opt/bin/hetmap: Could not find one of the dependencies
prelink: /opt/bin/dmap2hrc: Could not find one of the dependencies
prelink: /opt/bin/shgenmap: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcdsk: Could not find one of the dependencies
prelink: /opt/bin/dasdload: Could not find one of the dependencies
prelink: /opt/bin/ccgo: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/shgencubemap: Could not find one of the dependencies
prelink: /opt/bin/hetinit: Could not find one of the dependencies
prelink: /opt/bin/ndump: Could not find one of the dependencies
prelink: /opt/bin/dasdpdsu: Could not find one of the dependencies
prelink: /opt/bin/tapemap: Could not find one of the dependencies
prelink: /opt/bin/pakc: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/nstats: Could not find one of the dependencies
prelink: /opt/bin/v4l2info: Could not find one of the dependencies
prelink: /opt/bin/shsparse: Could not find one of the dependencies
prelink: /opt/bin/hetupd: Could not find one of the dependencies
prelink: /opt/bin/gtkpak: Could not find one of the dependencies
prelink: /opt/sbin/gvpe.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/sbin/ssldecode: Could not find one of the dependencies
prelink: /opt/bin/leaplogin: Could not find one of the dependencies
prelink: /opt/bin/dasdcat: Could not find one of the dependencies
prelink: /opt/bin/gvpectrl.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/bin/dasdls: Could not find one of the dependencies
prelink: /opt/bin/hercifc: Could not find one of the dependencies
prelink: /opt/bin/hetget: Could not find one of the dependencies
prelink: /opt/bin/cckddiag: Could not find one of the dependencies
prelink: /opt/bin/netscape: Could not find one of the dependencies
prelink: /opt/bin/cem: Could not find one of the dependencies
prelink: /opt/bin/shgenSBRDF: Could not find one of the dependencies
prelink: /opt/bin/Grimrock: Could not find one of the dependencies
prelink: /opt/bin/cckdswap: Could not find one of the dependencies
prelink: /opt/bin/cadaverserver: Could not find one of the dependencies
prelink: /opt/bin/catrats: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcomp: Could not find one of the dependencies
prelink: /opt/bin/tapecopy: Could not find one of the dependencies
prelink: /opt/bin/dasdseq: Could not find one of the dependencies
prelink: /opt/bin/pakx: Could not find one of the dependencies
prelink: /opt/bin/dasdisup: Could not find one of the dependencies
prelink: /opt/bin/tapesplt: Could not find one of the dependencies
prelink: /opt/bin/dasdinit: Could not find one of the dependencies
prelink: /opt/bin/cadaverspyboss: Could not find one of the dependencies
prelink: /opt/bin/hercules: Could not find one of the dependencies
prelink: /opt/bin/shrike: Could not find one of the dependencies
prelink: /opt/bin/hetmap: Could not find one of the dependencies
prelink: /opt/bin/dmap2hrc: Could not find one of the dependencies
prelink: /opt/bin/shgenmap: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcdsk: Could not find one of the dependencies
prelink: /opt/bin/dasdload: Could not find one of the dependencies
prelink: /opt/bin/ccgo: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/shgencubemap: Could not find one of the dependencies
prelink: /opt/bin/hetinit: Could not find one of the dependencies
prelink: /opt/bin/ndump: Could not find one of the dependencies
prelink: /opt/bin/dasdpdsu: Could not find one of the dependencies
prelink: /opt/bin/tapemap: Could not find one of the dependencies
prelink: /opt/bin/pakc: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/nstats: Could not find one of the dependencies
prelink: /opt/bin/v4l2info: Could not find one of the dependencies
prelink: /opt/bin/shsparse: Could not find one of the dependencies
prelink: /opt/bin/hetupd: Could not find one of the dependencies
prelink: /opt/bin/gtkpak: Could not find one of the dependencies
prelink: /opt/sbin/gvpe.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/sbin/ssldecode: Could not find one of the dependencies
prelink: /opt/bin/leaplogin: Could not find one of the dependencies
prelink: /opt/bin/dasdcat: Could not find one of the dependencies
prelink: /opt/bin/gvpectrl.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/bin/dasdls: Could not find one of the dependencies
prelink: /opt/bin/hercifc: Could not find one of the dependencies
prelink: /opt/bin/hetget: Could not find one of the dependencies
prelink: /opt/bin/cckddiag: Could not find one of the dependencies
prelink: /opt/bin/netscape: Could not find one of the dependencies
prelink: /opt/bin/cem: Could not find one of the dependencies
prelink: /opt/bin/shgenSBRDF: Could not find one of the dependencies
prelink: /opt/bin/Grimrock: Could not find one of the dependencies
prelink: /opt/bin/cckdswap: Could not find one of the dependencies
prelink: /opt/bin/cadaverserver: Could not find one of the dependencies
prelink: /opt/bin/catrats: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcomp: Could not find one of the dependencies
prelink: /opt/bin/tapecopy: Could not find one of the dependencies
prelink: /opt/bin/dasdseq: Could not find one of the dependencies
prelink: /opt/bin/pakx: Could not find one of the dependencies
prelink: /opt/bin/dasdisup: Could not find one of the dependencies
prelink: /opt/bin/tapesplt: Could not find one of the dependencies
prelink: /opt/bin/dasdinit: Could not find one of the dependencies
prelink: /opt/bin/cadaverspyboss: Could not find one of the dependencies
prelink: /opt/bin/hercules: Could not find one of the dependencies
prelink: /opt/bin/shrike: Could not find one of the dependencies
prelink: /opt/bin/hetmap: Could not find one of the dependencies
prelink: /opt/bin/dmap2hrc: Could not find one of the dependencies
prelink: /opt/bin/shgenmap: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcdsk: Could not find one of the dependencies
prelink: /opt/bin/dasdload: Could not find one of the dependencies
prelink: /opt/bin/ccgo: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/shgencubemap: Could not find one of the dependencies
prelink: /opt/bin/hetinit: Could not find one of the dependencies
prelink: /opt/bin/ndump: Could not find one of the dependencies
prelink: /opt/bin/dasdpdsu: Could not find one of the dependencies
prelink: /opt/bin/tapemap: Could not find one of the dependencies
prelink: /opt/bin/pakc: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/nstats: Could not find one of the dependencies
prelink: /opt/bin/v4l2info: Could not find one of the dependencies
prelink: /opt/bin/shsparse: Could not find one of the dependencies
prelink: /opt/bin/hetupd: Could not find one of the dependencies
prelink: /opt/bin/gtkpak: Could not find one of the dependencies
prelink: /opt/sbin/gvpe.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/sbin/ssldecode: Could not find one of the dependencies
prelink: /opt/bin/leaplogin: Could not find one of the dependencies
prelink: /opt/bin/dasdcat: Could not find one of the dependencies
prelink: /opt/bin/gvpectrl.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/bin/dasdls: Could not find one of the dependencies
prelink: /opt/bin/hercifc: Could not find one of the dependencies
prelink: /opt/bin/hetget: Could not find one of the dependencies
prelink: /opt/bin/cckddiag: Could not find one of the dependencies
prelink: /opt/bin/netscape: Could not find one of the dependencies
prelink: /opt/bin/cem: Could not find one of the dependencies
prelink: /opt/bin/shgenSBRDF: Could not find one of the dependencies
prelink: /opt/bin/Grimrock: Could not find one of the dependencies
prelink: /opt/bin/cckdswap: Could not find one of the dependencies
prelink: /opt/bin/cadaverserver: Could not find one of the dependencies
prelink: /opt/bin/catrats: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcomp: Could not find one of the dependencies
prelink: /opt/bin/tapecopy: Could not find one of the dependencies
prelink: /opt/bin/dasdseq: Could not find one of the dependencies
prelink: /opt/bin/pakx: Could not find one of the dependencies
prelink: /opt/bin/dasdisup: Could not find one of the dependencies
prelink: /opt/bin/tapesplt: Could not find one of the dependencies
prelink: /opt/bin/dasdinit: Could not find one of the dependencies
prelink: /opt/bin/cadaverspyboss: Could not find one of the dependencies
prelink: /opt/bin/hercules: Could not find one of the dependencies
prelink: /opt/bin/shrike: Could not find one of the dependencies
prelink: /opt/bin/hetmap: Could not find one of the dependencies
prelink: /opt/bin/dmap2hrc: Could not find one of the dependencies
prelink: /opt/bin/shgenmap: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcdsk: Could not find one of the dependencies
prelink: /opt/bin/dasdload: Could not find one of the dependencies
prelink: /opt/bin/ccgo: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/shgencubemap: Could not find one of the dependencies
prelink: /opt/bin/hetinit: Could not find one of the dependencies
prelink: /opt/bin/ndump: Could not find one of the dependencies
prelink: /opt/bin/dasdpdsu: Could not find one of the dependencies
prelink: /opt/bin/tapemap: Could not find one of the dependencies
prelink: /opt/bin/pakc: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/nstats: Could not find one of the dependencies
prelink: /opt/bin/v4l2info: Could not find one of the dependencies
prelink: /opt/bin/shsparse: Could not find one of the dependencies
prelink: /opt/bin/hetupd: Could not find one of the dependencies
prelink: /opt/bin/gtkpak: Could not find one of the dependencies
prelink: /opt/sbin/gvpe.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/sbin/ssldecode: Could not find one of the dependencies
prelink: /opt/bin/leaplogin: Could not find one of the dependencies
prelink: /opt/bin/dasdcat: Could not find one of the dependencies
prelink: /opt/bin/gvpectrl.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/bin/dasdls: Could not find one of the dependencies
prelink: /opt/bin/hercifc: Could not find one of the dependencies
prelink: /opt/bin/hetget: Could not find one of the dependencies
prelink: /opt/bin/cckddiag: Could not find one of the dependencies
prelink: /opt/bin/netscape: Could not find one of the dependencies
prelink: /opt/bin/cem: Could not find one of the dependencies
prelink: /opt/bin/shgenSBRDF: Could not find one of the dependencies
prelink: /opt/bin/Grimrock: Could not find one of the dependencies
prelink: /opt/bin/cckdswap: Could not find one of the dependencies
prelink: /opt/bin/cadaverserver: Could not find one of the dependencies
prelink: /opt/bin/catrats: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcomp: Could not find one of the dependencies
prelink: /opt/bin/tapecopy: Could not find one of the dependencies
prelink: /opt/bin/dasdseq: Could not find one of the dependencies
prelink: /opt/bin/pakx: Could not find one of the dependencies
prelink: /opt/bin/dasdisup: Could not find one of the dependencies
prelink: /opt/bin/tapesplt: Could not find one of the dependencies
prelink: /opt/bin/dasdinit: Could not find one of the dependencies
prelink: /opt/bin/cadaverspyboss: Could not find one of the dependencies
prelink: /opt/bin/hercules: Could not find one of the dependencies
prelink: /opt/bin/shrike: Could not find one of the dependencies
prelink: /opt/bin/hetmap: Could not find one of the dependencies
prelink: /opt/bin/dmap2hrc: Could not find one of the dependencies
prelink: /opt/bin/shgenmap: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/cckdcdsk: Could not find one of the dependencies
prelink: /opt/bin/dasdload: Could not find one of the dependencies
prelink: /opt/bin/ccgo: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/shgencubemap: Could not find one of the dependencies
prelink: /opt/bin/hetinit: Could not find one of the dependencies
prelink: /opt/bin/ndump: Could not find one of the dependencies
prelink: /opt/bin/dasdpdsu: Could not find one of the dependencies
prelink: /opt/bin/tapemap: Could not find one of the dependencies
prelink: /opt/bin/pakc: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/ckd2cckd: Could not find one of the dependencies
prelink: /opt/bin/nstats: Could not find one of the dependencies
prelink: /opt/bin/v4l2info: Could not find one of the dependencies
prelink: /opt/bin/shsparse: Could not find one of the dependencies
prelink: /opt/bin/hetupd: Could not find one of the dependencies
prelink: /opt/bin/gtkpak: Could not find one of the dependencies
prelink: /opt/sbin/gvpe.n900: Using /lib/ld-linux.so.3, not /lib/ld-linux.so.2 as dynamic linker
prelink: /opt/sbin/ssldecode: Could not find one of the dependencies