Package: ttf-mscorefonts-installer
Version: 3.1
Justification: breaks unrelated software
Severity: critical

The new revision seems to introduce a very strict regex to validate HTTP proxy configuration in the package configuration script, which makes it impossible to use a proxy with a non fully qualified domain name. If you try to use a proxy name such as 'http://myproxy:8080', you will get back to the debconfig screen withotu any error message, if you don't know that you should use 'http://myproxy.mycompany.com', you won't be able to get out of the loop and upgrade your system, even CTRL-C won't let you get out of the loop (hence the severity level for this bug report).

Contexts where people use a non qualified host name as a proxy are very frequent ! Contexts people use a fake domain name is also something that exists (e.g 'proxy.home.lan') !

The code is as follows:

    while ! echo "$http_proxy" | \
egrep -q 'https?://([[:alnum:]]([-[:alnum:]]+[[:alnum:]])*\.)+[[:alnum:]]{2,3}(:\d+)?/?' && \
        [ ! -z "$http_proxy" ] ; do
        db_fset msttcorefonts/http_proxy seen false
        db_input high msttcorefonts/http_proxy
        db_go
        db_get msttcorefonts/http_proxy
        http_proxy=$RET
    done


Worse: if you look closely at the regex you see that even a FQDN with a top level domain name that is more than 3 letters will be rejected, even though there *are* such valid TLDs (eg. '.info', '.travel', '.aero'...).

I think that the script should just *not* try to enforce such a strict regex, but should just fail nicely if it fails to resolve the provided string.


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
APT policy: (700, 'unstable'), (600, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ttf-mscorefonts-installer depends on:
ii cabextract 1.2-3 a program to extract Microsoft Cab ii debconf [debconf-2.0] 1.5.28 Debian configuration management sy ii defoma 0.11.10-4 Debian Font Manager -- automatic f
ii  wget                          1.12-1.1   retrieves files from the web
ii xfonts-utils 1:7.5+2 X Window System font utility progr

Versions of packages ttf-mscorefonts-installer recommends:
ii ttf-liberation 1.05.2.20091019-4 Fonts with the same metrics as Tim ii x-ttcidfont-conf 32 TrueType and CID fonts configurati

ttf-mscorefonts-installer suggests no packages.

-- debconf-show failed





--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to