Fedora 38 : youtube-dl (2023-1f11546a48)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1f11546a48 advisory. Update to latest upstream git snapshot. Various changes, including bug fix for cookie leak vulnerability. Tenable has extracted the preceding description blo...

Fedora 37 : youtube-dl (2023-5435c10480)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5435c10480 advisory. Update to latest upstream git snapshot. Various changes, including bug fix for cookie leak vulnerability. Tenable has extracted the preceding description blo...

Guide: How Google Workspace-based Organizations can leverage Chrome to improve Security

More and more organizations are choosing Google Workspace as their default employee toolset of choice. But despite the productivity advantages, this organizational action also incurs a new security debt. Security teams now have to find a way to adjust their security architecture to this new cloud...

Fedora: Security Advisory for yt-dlp (FEDORA-2023-79e2b35ba6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: yt-dlp-2023.07.06-1.fc37

yt-dlp is a command-line program to download videos from many different online video platforms, such as youtube.com. The project is a fork of youtube-dl with additional features and fixes...

Fedora 37 : yt-dlp (2023-79e2b35ba6)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-79e2b35ba6 advisory. Update to 2023.07.06. Mitigates CVE-2023-35934 / GHSA-v8mc-9377-rwjj. ---- Update to 2023.06.22. Fixes rhbz2216612. ---- Update to 2023.06.21. Fixes...

Fedora: Security Advisory for yt-dlp (FEDORA-2023-9f3938e10d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: yt-dlp-2023.07.06-1.fc38

yt-dlp is a command-line program to download videos from many different online video platforms, such as youtube.com. The project is a fork of youtube-dl with additional features and fixes...

Fedora 38 : yt-dlp (2023-9f3938e10d)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9f3938e10d advisory. Update to 2023.07.06. Mitigates CVE-2023-35934 / GHSA-v8mc-9377-rwjj Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 38 : yt-dlp (2023-6b68ed8725)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6b68ed8725 advisory. Update to 2023.06.22. Fixes rhbz2216612. ---- Update to 2023.06.21. Fixes rhbz2216612. Tenable has extracted the preceding description block directly from th...

CVE-2023-35934

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

UBUNTU-CVE-2023-35934

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

Design/Logic Flaw

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

basketcase (>=0.0.4, <=1.0.0) potentially affected by CVE-2023-35934 via yt-dlp (2021.9.2)

yt-dlp PYPI version 2021.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =0.0.4, =1.0.0 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

basketcase (1.0.1) potentially affected by CVE-2023-35934 via yt-dlp (2021.10.22)

yt-dlp PYPI version 2021.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 1.0.1 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

basketcase (>=1.0.2, <=1.0.4), gharbala (>=0.1.3, <=0.1.9) +2 more potentially affected by CVE-2023-35934 via yt-dlp (2021.12.27)

yt-dlp PYPI version 2021.12.27 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase =1.0.2, =0.1.3, =0.4.0, =0.9.1, =1.0.3 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

songbird-py (>=0.1.1, <=0.1.5) potentially affected by CVE-2023-35934 via yt-dlp (2021.12.1)

yt-dlp PYPI version 2021.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - songbird-py =0.1.1, =0.1.5 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...

yt-dlp File Downloader cookie leak

Impact During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host. This vulnerable behavior is present in all versions of...

GHSA-V8MC-9377-RWJJ yt-dlp File Downloader cookie leak

Impact During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host. This vulnerable behavior is present in all versions of...

basketcase (3.0.0) potentially affected by CVE-2023-35934 via yt-dlp (2022.3.8.2)

yt-dlp PYPI version 2022.3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 3.0.0 Source cves: CVE-2023-35934 Source advisory: OSV:GHSA-V8MC-9377-RWJJ...