stop showing old versions in tb-updater / improve version parser / port version parser to python3 or so

[phabricator-migrator]

Information

ID: 823
PHID: PHID-TASK-3t3dfutbaujjtkzqtl3y
Author: Patrick
Status at Migration Time: open
Priority at Migration Time: Normal

Description

whonix shows older versions of tbb from tbb-downloader

JSON and XML are merely different data structures and so considered neutral in that case [0]. The parsers for either have had serious vuln classes sometimes causing RCE and many of the same sec bugs that browsers run into [1]. So the question should be which is the safest parser avaialble for either of these? Using python standard libs to parse XML or JSON (Pickle) not a good idea [2]. A modern and minimalist JSON parser is YAJL used in libvirt. Available in Debian [3]. My recommendation is to…

Comments