Hi, In the past it had been reported several times, that importing a large keyring (for example the Debian keyring) might need a really long time and make gnupg allocate much memory (trying to reproduce the issue I observed a DoS). I recently reported the issue to Werner Koch and he found a memory leak and fixed the issue. It seems the patch applies to gnupg (probably to 1.4.6 in oldstable too) as well as gnupg2.
Should this be fixed in stable and olstable? Then I would prepare the packages for gnupg (CCed Eric for gnupg2). http://bugs.debian.org/345911 (#345911, #113897, #172115) https://bugs.g10code.com/gnupg/issue1034 http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=31;filename=345911_svn4993.diff;att=1;bug=345911 http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/branches/STABLE-BRANCH-1-4/g10/keyring.c?root=GnuPG&rev=4993&r1=4963&r2=4993 (gnupg 1.4) http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/keyring.c?root=GnuPG&rev=4994&r1=4980&r2=4994 (gnupg2) Regards, Daniel -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
