I felt the wget devel team wasn't active since 1.82 release. I have sent
two patches without getting reply or anything from the wget devel team.
For an important software such as wget, the current situation needs 
remedy.

Fei


On Tue, 17 Dec 2002, [ISO-8859-1] Noèl Köthe wrote:

> On Tue, 2002-12-17 at 18:41, Hack Kampbjorn wrote:
> 
> > >>On Thursday 2002-12-12 14:15, Noèl Köthe wrote:
> > >>
> > >>
> > >>>maybe you notice a security problem in the wget program.
> > >>>http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html
> > >>>I added the fixing patch to the Debian package (I'm maintaining it see
> > >>>http://packages.debian.org/wget) but the upstream author isn't
> > >>>available.
> > >>>
> > >>>See http://www.mail-archive.com/wget%40sunsite.dk/msg04467.html
> > >>>and http://www.mail-archive.com/wget%40sunsite.dk/msg04524.html
> > >>>
> > >>>I asked some time ago if there is anybody with cvs write access
> > >>>(http://www.mail-archive.com/wget%40sunsite.dk/msg04508.html) but
> > >>>didn't get an answer.:(
> > >>>
> > >>>Can you tell me how to get this problem fixed?
> > >>>(the best would be to release the next version 1.8.3 with the security
> > >>>problem fixed)
> > 
> > I think only Hrvoje has the GNU access to make a new release, and he is 
> > unfortunately with little or no internet access.
> 
> I just added [EMAIL PROTECTED] to CC: and I think they could help us with this
> step.
> 
> But first we need to apply the fixing patch to cvs and for this I'm
> looking for someone who will apply it to the cvs.
> 
> -- 
>         Noèl Köthe
> 


Reply via email to