-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Format: 1.8 Date: Thu, 16 Nov 2023 02:25:22 -0500 Source: yt-dlp Architecture: source Version: 2023.11.16-1 Distribution: unstable Urgency: medium Maintainer: Unit 193 <unit193@debian.org> Changed-By: Unit 193 <unit193@debian.org> Closes: 1055996 Changes: yt-dlp (2023.11.16-1) unstable; urgency=medium . * New upstream version 2023.11.16. - Patch Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection. Disallow smuggling of arbitrary http_headers; extractors now only use specific headers. (Closes: #1055996, CVE-2023-46121) * d/control: Drop rtmpdump and mpv, as their use is deprecated. * d/t/upstream-tests.sh: Fix a typo in a variable name. Checksums-Sha1: be9846677cac41c48996ba8727657ce79e67f333 2058 yt-dlp_2023.11.16-1.dsc f459f6e5f3e39b3fbe66678c3d678bd9086d17e1 2553690 yt-dlp_2023.11.16.orig.tar.gz b0d3b804e2e4919359dadd1377a9ea68d69e1acf 5644 yt-dlp_2023.11.16-1.debian.tar.xz debe08ccc73ab2ff369d96832191b01eda19cded 6799 yt-dlp_2023.11.16-1_amd64.buildinfo Checksums-Sha256: 74d0a10872ee137de61ca7f510887f5d1a016e2739b9745adb1afc4bb1a4fe29 2058 yt-dlp_2023.11.16-1.dsc b689ced48b0da4944ce8a157e99e2349bbbf80ac7496d48825cfad02a410fa1e 2553690 yt-dlp_2023.11.16.orig.tar.gz 4f1c44e5e6fc0e484e739da78c316b8c6975b143c44b1e71cf5d3a053d3c73e0 5644 yt-dlp_2023.11.16-1.debian.tar.xz 5f4125c71fe3e68bdeefe2d59b848452cc2fc84a9b33bb12bb71ab67a82ec8af 6799 yt-dlp_2023.11.16-1_amd64.buildinfo Files: e72a3108bd2550414ce7740e94b63368 2058 web optional yt-dlp_2023.11.16-1.dsc 06ad2854207a450b3ef1ed73135f53ca 2553690 web optional yt-dlp_2023.11.16.orig.tar.gz 74bbec4eb05019bbd279c9fab75ea303 5644 web optional yt-dlp_2023.11.16-1.debian.tar.xz 90d47c94a75b4163723ef71613e18b2d 6799 web optional yt-dlp_2023.11.16-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCQAdFiEEjbPlhoZdK0orGFpcUAHhsJqjdEsFAmVVxesACgkQUAHhsJqj dEtDgQ/7Bur5uL08NpqBsCbWtrg7ydsXXUzlKUT5krDrWxjFTvsivgELqeUdtjtS HZBJ04+Uy2OvKGTGqkumbbCJvNOPQc7fLbslfI3vwE64ByP5V5i4Dd/POQ+zS4gs iFa9PCdxgfsNuoZhWe+O8S8soSUNZBAbClIE6VRByA5gXu8R2vuJCFTKmTEgMMra DgVui5h2HIxwX8QHxhl3HtkLs1LVJDsH4Tc6qUOBSaOJ1X7x2TFSbTJXiEu9Mnq4 UoIQALDq8qHhGb3YFP8W60wJt0G1xa0zSeFaAusyk4vQSrx2VhmWNheErC6w3arx nHCoAuaYvXZ3k+ikO63d0SERFbY56zVACLWpONYBVcp9FkNUmE1927K9VGUHZtxq KgxfaXbS9riIbVEqruzZbouqajhlIZRiGm10I5kpd8GE5vJTWtGZQHePftoL0pEN u3qTr7MclGPeiQIn0PtzpBirpFEj8V8Rj0zYWO78EuTf5SebBJO5bAa1i/M5Hk/S NN+9JsSdppCyskbLC2F/knRILzXBDBh/JnRba11OsAFrnBV0mXqUCBlsxp4ocIlg KkcPLy0cOOqq9iEnDI/bfBuJeW7X4qyDJn0G29hqPHfEwl6zdQUFvb2OGvgw7WaK pQgx5GVKrJYgu0V154tTZf4yT+daqHMAHZePRTcyih5Lm+G5r48= =+sCA -----END PGP SIGNATURE-----