Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1279966

Bug#1126508: dpkg's email validation module does not check for "." in the domain

From Guillem Jover <guillem@debian.org>
Newsgroups linux.debian.bugs.dist, linux.debian.maint.dpkg
Subject Bug#1126508: dpkg's email validation module does not check for "." in the domain
Date 2026-01-28 00:50 +0100
Message-ID <Mi0YN-dOTR-9@gated-at.bofh.it> (permalink)
References <MhWBQ-dMbx-13@gated-at.bofh.it> <MhWBQ-dMbx-13@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


Hi!

On Wed, 2026-01-28 at 00:30:21 +0530, Nilesh Patra wrote:
> Package: dpkg
> Severity: normal
> X-Debbugs-Cc: debian-lint-maint@lists.debian
> Control: affects -1 + src:lintian
> Version: 1.23.5

> While trying to fix tests for lintian, I noticed that specifying the
> email as "username@localhost" in Uploaders field does not cause the
> build to choke.
> 
> That means that dpkg is accepting malformed address here, as it should
> check also if TLD is present or not.

While implementing the parser/validator I wondered whether I should
enforce this, and because I was unsure, I left it as is (at least for
now), as we can always enforce it later (given that there was no
enforcing before).

I guess my worry would be whether that would break any existing valid
use (outside of the Debian archive) for locally/internal/vendor built
packages, and for the myriad of brand TLDs (for example), although for
the latter I think I've read somewhere that TLDs are not supposed to
have MXs defined?

Thanks,
Guillem

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#1126508: dpkg's email validation module does not check for "." in the domain Nilesh Patra <nilesh@riseup.net> - 2026-01-27 20:10 +0100
  Bug#1126508: dpkg's email validation module does not check for "." in the domain Guillem Jover <guillem@debian.org> - 2026-01-28 00:50 +0100
    Bug#1126508: dpkg's email validation module does not check for "." in the domain Guillem Jover <guillem@debian.org> - 2026-01-29 08:40 +0100
      Bug#1126508: dpkg's email validation module does not check for "." in the domain Holger Levsen <holger@layer-acht.org> - 2026-01-29 14:00 +0100

csiph-web