diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..85aa1c301 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,62 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +Use this section to tell people how to report a vulnerability. + +Tell them where to go, how often they can expect to get an update on a +reported vulnerability, what to expect if the vulnerability is accepted or +declined, etc. + +youtube-dl Download Page +Remember youtube-dl requires Python version 2.6, 2.7, or 3.2+ to work except for Windows exe. + +Windows exe requires Microsoft Visual C++ 2010 Service Pack 1 Redistributable Package (x86) and does not require Python that is already embedded into the binary. + +2021.12.17 (sig) +SHA256: 7880e01abe282c7fd596f429c35189851180d6177302bb215be1cdec78d6d06d + +Windows exe (sig - SHA256 26e5c00c35c5c3edc86dfc0a720aed109a13b1b7c67ac654a0ce8ff82a1f2c16) +Full source + docs + binary tarball (sig - SHA256 9f3b99c8b778455165b4525f21505e86c7ff565f3ac319e19733d810194135df) + +To install it right away for all UNIX users (Linux, OS X, etc.), type: +sudo curl -L https://yt-dl.org/downloads/latest/youtube-dl -o /usr/local/bin/youtube-dl + +sudo chmod a+rx /usr/local/bin/youtube-dl +If you do not have curl, you can alternatively use a recent wget: +sudo wget https://yt-dl.org/downloads/latest/youtube-dl -O /usr/local/bin/youtube-dl + +sudo chmod a+rx /usr/local/bin/youtube-dl +You can also use pip: +sudo pip install --upgrade youtube_dl +This command will update youtube-dl if you have already installed it. See the pypi page for more information. + +You can use Homebrew if you have it: +brew install youtube-dl +To check the signature, type: +sudo wget https://yt-dl.org/downloads/latest/youtube-dl.sig -O youtube-dl.sig +gpg --verify youtube-dl.sig /usr/local/bin/youtube-dl +rm youtube-dl.sig +The following GPG keys will be used to sign the binaries and the git tags: + +Sergey M. ED7F 5BF4 6B3B BED8 1C87 368E 2C39 3E0F 18A9 236D +Older releases are also signed with one of: + +Philipp Hagemeister 7D33 D762 FD6C 3513 0481 347F DB4B 54CB A482 6A18 (until 2016-05-30) +Philipp Hagemeister 0600 E1DB 6FB5 3A5D 95D8 FC0D F5EA B582 FAFB 085C (until 2013-06-01) +Filippo Valsorda 428D F5D6 3EF0 7494 BB45 5AC0 EBF0 1804 BCF0 5F6B (until 2014) +Creative Commons License +Copyright © 2006-2011 Ricardo Garcia Gonzalez +Copyright © 2011-2021 youtube-dl developers