Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 39: FEDORA-2024-72fb215fcd Moderate: File System Modification

fedora
Calendar Grey July 16, 2024
Dist Fedora Esm H88
Keep your yt-dlp protected by applying Fedora's most recent updates targeting serious vulnerabilities in video retrieval processes.
Update to 2024.07.09 Update to 2024.07.07 Update to 2024.07.02

Summary

yt-dlp is a command-line program to download videos from many different online

video platforms, such as youtube.com. The project is a fork of youtube-dl with

additional features and fixes.

Update Information:

Update to 2024.07.09 Update to 2024.07.07 Update to 2024.07.02

Topics%20covered

Topics Covered

security advisory Fedora remote code execution command-line tool yt-dlp file system modification

Change Log

* Thu Jul 11 2024 Mikel Olasagasti Uranga - 2024.07.09-1 - Update to 2024.07.09. Fixes rhbz#2297344 * Mon Jul 8 2024 Mikel Olasagasti Uranga - 2024.07.07-1 - Update to 2024.07.07. Fixes rhbz#2296356 * Thu Jul 4 2024 Mikel Olasagasti Uranga - 2024.07.02-1 - Update to 2024.07.02. Fixes rhbz#2295769 * Fri Jun 7 2024 Python Maint - 2024.05.27-2 - Rebuilt for Python 3.13

References


[ 1 ] Bug #2295956 - CVE-2024-38519 yt-dlp: File system modification and RCE through improper file-extension sanitization [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2295956

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-72fb215fcd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: yt-dlp
Product: Fedora 39
Version: 2024.07.09
Release: 1.fc39
URL: https://github.com/yt-dlp/yt-dlp
Summary: A command-line program to download videos from online video platforms

Topics%20covered

Topics Covered

security advisory Fedora remote code execution command-line tool yt-dlp file system modification

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here