Uh, the existence of a buffer overflow (which doesn't even cause disclosure of an encrypted message) has nothing to do with the strength of the RSA algorithm, which is what the comment I replied to was talking about.

You're missing the more obvious form of attack http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/00024...