Daniel, Daniel Stenberg <[email protected]> writes:
> On Tue, 30 Jun 2015, Ander Juaristi wrote: > >> the library user (me, us, in this case) doesn't have to know >> anything about UTF-8, so we should rely on the library for >> everything UTF-8-related. > > I fully agree with this and I will stand by this rule. That's why I > sent the "security notice" pointing out this problem without actually > providing any fix, since the fix is for the libidn team (and really, > the distros) to apply and ship. do you have a link to the fix for libidn? Security fixes must be applied ASAP, wget is not the only libidn user, I'll try to poke around.. Regards, Giuseppe
