[info=81825454db1cadf353114d970ca18474b2a0e5f748e1918a9890ea3e1f3571bd]

OBS-URL: https://build.opensuse.org/package/show/network:utilities/yt-dlp?expand=0&rev=95
This commit is contained in:
Jan Engelhardt 2024-07-02 17:54:57 +00:00 committed by Git OBS Bridge
parent 56060aedbc
commit ec67df018b
2 changed files with 6 additions and 5 deletions

3
build.specials.obscpio Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:135ab0dc0538868ab58d54b5ba4610d321922f88acf75b64a02abd9982fa3442
size 256

View File

@ -2,11 +2,9 @@
Tue Jul 2 10:30:24 UTC 2024 - Michael Vetter <mvetter@suse.com>
- Update to release 2024.07.01:
* Security: [CVE-2024-38519] Properly sanitize file-extension
to prevent file system modification and RCE
Unsafe extensions are now blocked from being downloaded
* For details see:
https://github.com/yt-dlp/yt-dlp/releases/tag/2024.07.01
* Properly sanitize file-extension to prevent file system
modification and RCE. Unsafe extensions are now blocked from
being downloaded. [CVE-2024-38519 boo#1227305]
-------------------------------------------------------------------
Tue May 28 06:39:46 UTC 2024 - Jan Engelhardt <jengelh@inai.de>