[info=81825454db1cadf353114d970ca18474b2a0e5f748e1918a9890ea3e1f3571bd]
OBS-URL: https://build.opensuse.org/package/show/network:utilities/yt-dlp?expand=0&rev=95
This commit is contained in:
parent
56060aedbc
commit
ec67df018b
3
build.specials.obscpio
Normal file
3
build.specials.obscpio
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:135ab0dc0538868ab58d54b5ba4610d321922f88acf75b64a02abd9982fa3442
|
||||
size 256
|
@ -2,11 +2,9 @@
|
||||
Tue Jul 2 10:30:24 UTC 2024 - Michael Vetter <mvetter@suse.com>
|
||||
|
||||
- Update to release 2024.07.01:
|
||||
* Security: [CVE-2024-38519] Properly sanitize file-extension
|
||||
to prevent file system modification and RCE
|
||||
Unsafe extensions are now blocked from being downloaded
|
||||
* For details see:
|
||||
https://github.com/yt-dlp/yt-dlp/releases/tag/2024.07.01
|
||||
* Properly sanitize file-extension to prevent file system
|
||||
modification and RCE. Unsafe extensions are now blocked from
|
||||
being downloaded. [CVE-2024-38519 boo#1227305]
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 28 06:39:46 UTC 2024 - Jan Engelhardt <jengelh@inai.de>
|
||||
|
Loading…
Reference in New Issue
Block a user