[pkg-gnupg-maint] Bug#828109: gnupg2: does not react well to bad ECDSA subkey packet

Clint Adams clint at debian.org
Sat Jun 25 08:23:43 UTC 2016


Package: gnupg2
Version: 2.1.11-7
Severity: normal

When running either

    gpg2 --no-default-keyring --keyring hOpenPGP/tests/data/debian-keyring.gpg --list-packets

or

    gpg2 --list-packets hOpenPGP/tests/data/debian-keyring.gpg

(on the tests/data/debian-keyring.gpg from the haskell-hopenpgp source package),

gpg2 chokes on the ECDSA subkey of gniibe.  I believe that it has a
non-conformant MPI payload, but this being a fatal condition seems suboptimal.



More information about the pkg-gnupg-maint mailing list