GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | gnupg2 | <= 2.2.40-1.1 | gnupg2_2.2.40-1.1_all.deb |
Debian | 11 | all | gnupg2 | <= 2.2.27-2+deb11u2 | gnupg2_2.2.27-2+deb11u2_all.deb |
Debian | 10 | all | gnupg2 | <= 2.2.12-1+deb10u2 | gnupg2_2.2.12-1+deb10u2_all.deb |
Debian | 999 | all | gnupg2 | <= 2.2.43-6 | gnupg2_2.2.43-6_all.deb |
Debian | 13 | all | gnupg2 | <= 2.2.40-3 | gnupg2_2.2.40-3_all.deb |