http://lists.gnu.org/archive/html/help-libidn/2015-05/msg00002.html
On Wednesday 01 July 2015 23:11:02 Giuseppe Scrivano wrote: > Daniel, > > Daniel Stenberg <[email protected]> writes: > > On Tue, 30 Jun 2015, Ander Juaristi wrote: > >> the library user (me, us, in this case) doesn't have to know > >> anything about UTF-8, so we should rely on the library for > >> everything UTF-8-related. > > > > I fully agree with this and I will stand by this rule. That's why I > > sent the "security notice" pointing out this problem without actually > > providing any fix, since the fix is for the libidn team (and really, > > the distros) to apply and ship. > > do you have a link to the fix for libidn? Security fixes must be > applied ASAP, wget is not the only libidn user, I'll try to poke > around.. > > Regards, > Giuseppe
