*** This bug is a security vulnerability *** Public security bug reported:
Binary package hint: gnome-control-center Ubuntu version: Ubuntu 10.04.1 LTS and Ubuntu maverick (development branch) Package version: Lucid: 1:2.30.1-0ubuntu1 Maverick: 1:2.31.91-0ubuntu1 How to replicate: Go to System -> Preferences -> Network Proxy (or gnome-network-properties) Manual, Use same for all protocols, proxy.sun.ac.za port 3128 Ignored hosts: *.sun.ac.za and 146.232.0.0/16 Apply Sytem-wide Restart computer Part 1: run: sudo aptitude update w/h: apt tries to use the proxy to connect to the ubuntu repository at ftp://ftp.sun.ac.za/ w/s/h: apt should obey the ignored hosts and connect directly to this server workaround: comment out "Acquire::ftp::proxy "ftp://proxy.sun.ac.za:3128";"; in /etc/apt/apt.conf. Then apt connects directly to ALL ftp servers. Part 2: sudo aptitude install flashplugin-installer w/h: apt calls wget, which on its turn tries to download the flashplugin from http://archive.canonical.com directly, without using the proxy server. w/s/h: wget, which is called by apt, should obey the proxy rules set "system-wide" in gnome-network-properties. workaround: running a transparent proxy on another computer through which the traffic is routed. Or "sudo killall wget" a lot of times and let the install fail. The same happens when installing ttf-mscorefonts-installer, which is also called by wine and ubuntu-restricted-extras. This bug is present since 10.04 and affects all users on networks behind proxy servers. This includes university networks. Bug also affects: aptitude apt-get software-center wget This bug can be classified as a security vulnerability as access to update-repositories might be blocked (part 1). ** Affects: gnome-control-center (Ubuntu) Importance: Undecided Status: New ** Visibility changed to: Public -- gnome-network-properties does not set apt proxy correctly https://bugs.launchpad.net/bugs/631185 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-control-center in ubuntu. -- desktop-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
