Hello,

this is a forwarded (and answered) Bug report which I add to the wget bug tracker as a wishlist request:

From: Micah Cowan <micah@cowan.name>
To: Michael S Gilbert <michael.s.gilbert@gmail.com>,
 550436@bugs.debian.org
Subject: Re: Bug #550436: wget: forks libntlm
Date: Fri, 09 Oct 2009 21:17:06 -0700

Michael S Gilbert wrote:

> package: wget
> version: 1.12-1
> severity: important
> tags: security
>
> hi,
>
> wget implements a forked version of libntlm.  in order to provide
> timely security support (and to reduce some of the burden on the
> security team), it would be very desirable (if possible) for wget to
> link to the existing libntlm library, rather than implementing its own
> version. thanks.

This is untrue. Wget's ntlm support was taken from curl, not from libntlm.

Taking advantage of libntlm could be a possible goal, however it
currently lacks support for the most recent version of the protocol, whereas a user has recently contributed that support to Wget. It is not present in 1.12 because it hasn't been sufficiently tested (mainly against the earlier versions of the protocol).

It'd probably be ideal for that support to find its way into libntlm. At that time, we'd probably consider using it. For the immediate future, though, we (upstream) are probably not going to pursue that just yet.

--
Micah J. Cowan
Programmer, musician, typesetting enthusiast, gamer.
Maintainer of GNU Wget and GNU Teseq
http://micah.cowan.name/

http://bugs.debian.org/550436