[pkg-gnupg-maint] Bug#828109: gnupg2: does not react well to bad ECDSA subkey packet
Clint Adams
clint at debian.org
Sat Jun 25 08:23:43 UTC 2016
Package: gnupg2
Version: 2.1.11-7
Severity: normal
When running either
gpg2 --no-default-keyring --keyring hOpenPGP/tests/data/debian-keyring.gpg --list-packets
or
gpg2 --list-packets hOpenPGP/tests/data/debian-keyring.gpg
(on the tests/data/debian-keyring.gpg from the haskell-hopenpgp source package),
gpg2 chokes on the ECDSA subkey of gniibe. I believe that it has a
non-conformant MPI payload, but this being a fatal condition seems suboptimal.
More information about the pkg-gnupg-maint
mailing list