github-mirrors/yt-dlp
1
0
Fork 0
mirror of https://github.com/yt-dlp/yt-dlp.git synced 2026-11-03 19:32:46 +02:00
Code Issues Packages Projects Releases Wiki Activity

[cleanup] Misc (#17892)

Browse Source 
Authored by: doe1080, bashonly

Co-authored-by: bashonly <88596187+bashonly@users.noreply.github.com>
This commit is contained in:
doe1080
2026-10-26 21:07:11 +00:00
committed by GitHub
co-authored by bashonly
parent 755a01732c
commit 7e3644cfa6
6 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
devscripts/changelog_override.json
+6 -1
View File
@@ -408,7 +408,7 @@
{
"action": "add",
"when": "70279f2f0c576e23e1ec1406317d2cb85586af3f",
"short": "[priority] Security: Old yt-dlp executables are vulnerable to man-in-the-middle attacks\n - A man-in-the-middle/MITM attack is when your internet traffic is intercepted by an attacker that impersonates the website(s) you browse and sends you malicious data instead.\n - If you think you may be targeted by such an attack, it is strongly recommended to avoid using the self-updater (e.g. the `-U`, `--update`, `--update-to` command-line options), and instead manually download and install this release's executable.\n - For more details, see the [`certifi` security advisory](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2)"
"short": "[priority] Security: Old yt-dlp executables are vulnerable to man-in-the-middle attacks\n - A man-in-the-middle/MITM attack is when your internet traffic is intercepted by an attacker that impersonates the website(s) you browse and sends you malicious data instead.\n - If you think you may be targeted by such an attack, it is strongly recommended to avoid using the self-updater (e.g. the `-U`, `--update`, `--update-to` command-line options), and instead manually download and install this release's executable.\n - For more details, see the [`certifi` security advisory](https://github.com/advisories/GHSA-6q48-6c7w-9gw2)"
},
{
"action": "add",
@@ -419,5 +419,10 @@
"action": "add",
"when": "3d28cf4780fa88689fc50010d72cf2f40ce3a3b8",
"short": "[priority] **The official Windows release binaries now require Windows 10 or later.** [Read more](https://github.com/yt-dlp/yt-dlp/issues/16917)"
},
{
"action": "add",
"when": "7747073a2b00ca4688637eef4e168af9d2a806cb",
"short": "[priority] Security: The recent `brotli` and `certifi` vulnerabilities have now been fully addressed in the executables\n - The `brotli` package bundled with the executables has been upgraded to version 1.2.1, and the `curl-cffi` package has been upgraded to version 0.17.0. These upgrades address the recent [`brotli` security vulnerability](https://github.com/advisories/GHSA-9v8h-qqgm-4m35)\n - `curl-cffi` 0.17.0 also fully addresses the recent [`certifi` security vulnerability](https://github.com/advisories/GHSA-6q48-6c7w-9gw2) that was already partially addressed by upgrading the `certifi` package bundled with the executables"
}
]