4d318be195
[update] fix (unexploitable) BB'06 vulnerability in rsa_verify
...
The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge
signatures for arbitrary messages if and only if the public key exponent is
3. Since the updates key is hardcoded to 65537, there is no risk for
youtube-dl, but I don't want vulnerable code in the wild.
The new function adopts a way safer approach of encoding-and-comparing to
replace the dangerous parsing code.
2016-01-21 20:12:17 +00:00
c0384f221e
Use proper encoding on compat_str construction when necessary
2015-12-20 06:29:36 +06:00
828b2a5cd9
Removing an unnecessary import
2015-11-15 09:40:32 +02:00
d3d3e2e3aa
Adding proxy to update procedure
2015-11-10 16:31:42 +02:00
de390ea077
update: Use https for getting the version info ( fixes #5909 )
2015-06-07 00:21:30 +02:00
70a1165b32
Don't use bare 'except:'
...
They catch any exception, including KeyboardInterrupt, we don't want to catch it.
2015-03-27 13:02:20 +01:00
be4a824d74
Add new option --source-address
...
Closes #3618 , fixes #721 , fixes #2481 , fixes #4551 , closes #1020 .
2015-01-10 19:56:51 +01:00
aa2fd59857
[update] Use utils HTTPS handler ( Fixes #4666 )
...
On FreeBSD, the default HTTPS handler is missing certificates, so use our own.
2015-01-09 20:20:48 +01:00
83e865a370
Fix PEP8 issue E713
2014-12-09 23:11:26 +01:00
673cf0e773
[update] Remove useless import
2014-11-26 12:37:45 +01:00
15938ab67a
[update] Modernize
2014-11-26 12:24:57 +01:00
2514d2635e
PEP8: E225,E227
2014-11-23 21:23:05 +01:00
8bcc875676
PEP8: more applied
2014-11-23 21:20:46 +01:00
5f6a1245ff
PEP8 applied
2014-11-23 20:41:03 +01:00
18a25c5d78
Clarify update output ( Fixes #2205 )
...
No, we are not intentionally hiding the version number. Why would we?
2014-01-23 10:24:44 +01:00
2e767313e4
[update] fix error
2013-11-24 06:52:21 +01:00
d7386f6276
[update] Check if version from repository is newer before updating
...
Closes #1704
2013-11-22 23:05:58 +01:00
0b63aed8df
[update] do not assign to unused variables
2013-11-22 19:15:36 +01:00
ce02ed60f2
Remove * imports
2013-11-17 16:47:52 +01:00
d279037036
[update] Prevent cmd window popup on Windows ( Fixes #1478 )
2013-09-29 14:37:06 +02:00
46353f6783
[update] Look for .exe extension on Windows ( Fixes #745 )
2013-09-29 14:37:00 +02:00
f9bd64c098
[update] Add package manager to error message ( #959 )
2013-07-01 02:36:49 +02:00
46a127eecb
Fix print_notes
2013-04-28 16:21:29 +02:00
43ff1a347d
Change rg3.github.com to rg3.github.io almost everywhere
2013-04-06 10:46:17 +02:00
12887875a2
Fix typo
2013-02-25 00:22:55 +01:00
3bf79c752e
Print *all* release notes
2013-02-22 00:36:23 +01:00
d5ed35b664
moved updating code to update.py
2012-12-30 19:50:33 +01:00
Filippo Valsorda
Sergey M․
David Ben Zakai
Jaime Marquínez Ferrándiz
Philipp Hagemeister
Jouke Waleson
Ricardo Garcia
Filippo Valsorda