aboutsummaryrefslogtreecommitdiff
path: root/test/test_update.py
AgeCommit message (Collapse)Author
2023-11-16Remove Python 3.7 support (#8361)bashonly
Closes #7803 Authored by: bashonly
2023-11-12[test:update] Implement simple updater unit testsbashonly
Authored by: bashonly
2021-02-09#64 Implement self updatershirt-dev
Co-authored-by: shirtjs <2660574+shirtjs@users.noreply.github.com> (shirt-dev) Co-authored-by: pukkandan <pukkandan@gmail.com>
2020-09-02[skip travis] renamingUnknown
to avoid using same folder when using pip install for example
2016-01-21[update] fix (unexploitable) BB'06 vulnerability in rsa_verifyFilippo Valsorda
The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge signatures for arbitrary messages if and only if the public key exponent is 3. Since the updates key is hardcoded to 65537, there is no risk for youtube-dl, but I don't want vulnerable code in the wild. The new function adopts a way safer approach of encoding-and-comparing to replace the dangerous parsing code.