bugGNU Wget - Bugs: bug #29504, use libntlm instead of codecopy

 
 

bug #29504: use libntlm instead of codecopy

Submitter:  Noël Köthe <nok>
Submitted:  Fri 09 Apr 2010 09:17:58 PM UTC
   
 
Category:  Feature Request Severity:  3 - Normal
Priority:  5 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Open
Release:  1.12 Operating System:  GNU/Linux
Reproducibility:  None Fixed Release:  None
Planned Release:  None Regression:  None
Work Required:  None Patch Included:  No
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 09 Apr 2010 09:17:58 PM UTC, original submission:  

Hello,

this is a forwarded (and answered) Bug report which I add to the wget bug tracker as a wishlist request:

From: Micah Cowan <micah@cowan.name>
To: Michael S Gilbert <michael.s.gilbert@gmail.com>,
 550436@bugs.debian.org
Subject: Re: Bug #550436: wget: forks libntlm
Date: Fri, 09 Oct 2009 21:17:06 -0700

Michael S Gilbert wrote:

> package: wget
> version: 1.12-1
> severity: important
> tags: security
>
> hi,
>
> wget implements a forked version of libntlm.  in order to provide
> timely security support (and to reduce some of the burden on the
> security team), it would be very desirable (if possible) for wget to
> link to the existing libntlm library, rather than implementing its own
> version. thanks.


This is untrue. Wget's ntlm support was taken from curl, not from libntlm.

Taking advantage of libntlm could be a possible goal, however it
currently lacks support for the most recent version of the protocol, whereas a user has recently contributed that support to Wget. It is not present in 1.12 because it hasn't been sufficiently tested (mainly against the earlier versions of the protocol).

It'd probably be ideal for that support to find its way into libntlm. At that time, we'd probably consider using it. For the immediate future, though, we (upstream) are probably not going to pursue that just yet.

--
Micah J. Cowan
Programmer, musician, typesetting enthusiast, gamer.
Maintainer of GNU Wget and GNU Teseq
http://micah.cowan.name/

http://bugs.debian.org/550436

Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by nok (Submitted the item)
  •  

    No changes have been made to this item

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code