rg3/youtube-dl — pull request #1704 by rzhxeo (2013-11-02 18:52:33+00:00)
Title: Check if version from repository is newer before updating

Currently it's possible for an attacker to downgrade to an older version of youtube-dl with an old signed versions.json file.
This could become a problem if there is an exploit for any (old) version.