Add openSUSE bugzilla reference for CVE-2024-38519

Synchronize with OBS
2024-07-02 19:54:26 +02:00 · 2024-07-02 19:53:18 +02:00
3 changed files with 11 additions and 3 deletions
--- a/yt-dlp.changes
+++ b/yt-dlp.changes
@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Tue Jul  2 10:30:24 UTC 2024 - Michael Vetter <mvetter@suse.com>
+
+- Update to release 2024.07.01:
+  * Properly sanitize file-extension to prevent file system
+    modification and RCE. Unsafe extensions are now blocked from
+    being downloaded. [CVE-2024-38519 boo#1227305]
+
 -------------------------------------------------------------------
 Tue May 28 06:39:46 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

--- a/yt-dlp.spec
+++ b/yt-dlp.spec
@ -21,7 +21,7 @@
 %define skip_python37 1
 %{?sle15_python_module_pythons}
 Name:           yt-dlp
-Version:        2024.05.27
+Version:        2024.07.01
 Release:        0
 Summary:        Enhanced fork of youtube-dl, a video site downloader for offline watching
 License:        CC-BY-SA-3.0 AND SUSE-Public-Domain
--- a/yt-dlp.tar.gz
+++ b/yt-dlp.tar.gz
Author	SHA256	Message	Date
Jan Engelhardt	81825454db	Add openSUSE bugzilla reference for CVE-2024-38519	2024-07-02 19:54:26 +02:00
Jan Engelhardt	153d9706b4	Synchronize with OBS	2024-07-02 19:53:18 +02:00