[From nobody Mon Jul 13 09:33:08 2026 Received: (at 1139716-close) by bugs.debian.org; 13 Jul 2026 08:32:09 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 92; hammy, 150; neutral, 169; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:52172) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wjC5B-005P5q-1G for 1139716-close@bugs.debian.org; Mon, 13 Jul 2026 08:32:09 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wjC5A-001haS-0S for 1139716-close@bugs.debian.org; Mon, 13 Jul 2026 08:32:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=OGqiIci4Yc+E5zSOqNkdSZy727Ds/5TiiboksQuWeEE=; b=VqO1312mcAbSUSChWy93ce+0/i EYlu5cdpcir+KAfqNhkdaJOsSEsV1TN4GAF5bPIi00M/LtHWAx+bJAFt1I9Gfez+z69z71/uWekpx jljTO6lWJJ/Gp2L7n1gu/8sUZuGNIIxEs2dY80p4syAZtbM/WLPyw6nIB49Qtmyjjl5WAgZImXpu1 UK8uCwdglP+gTBPw3y6wKY+f0M6xh7d3OqKnOCnoaUyGmeI0XJ1qIkfqP69ehurquofW23y98pw7g 5tVuH1YvV3AF2lh0u7zrHUn+Lt1Sryrb9C6jRpIkIKNAbrbY62eU5TdPprh4XBkKd+j4Jyv/21E7y 2UHff7LQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wjC59-0000000F9jT-0zmm; Mon, 13 Jul 2026 08:32:07 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Sandro_Knau=C3=9F?= <hefee@debian.org> To: 1139716-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: onionshare Debian: DAK Debian-Changes: onionshare_2.6.3-1+deb13u2_source.changes Debian-Source: onionshare Debian-Version: 2.6.3-1+deb13u2 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1139716: fixed in onionshare 2.6.3-1+deb13u2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1495245022161958084==" Message-Id: <E1wjC59-0000000F9jT-0zmm@fasolo.debian.org> Date: Mon, 13 Jul 2026 08:32:07 +0000 X-CrossAssassin-Score: 2 --===============1495245022161958084== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: onionshare Source-Version: 2.6.3-1+deb13u2 Done: Sandro Knau=C3=9F <hefee@debian.org> We believe that the bug you reported is fixed in the latest version of onionshare, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1139716@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sandro Knau=C3=9F <hefee@debian.org> (supplier of updated onionshare package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Jul 2026 19:28:08 +0200 Source: onionshare Architecture: source Version: 2.6.3-1+deb13u2 Distribution: trixie Urgency: medium Maintainer: Debian Privacy Tools Maintainers <pkg-privacy-maintainers@lists.a= lioth.debian.org> Changed-By: Sandro Knau=C3=9F <hefee@debian.org> Closes: 1139716 1139717 Changes: onionshare (2.6.3-1+deb13u2) trixie; urgency=3Dmedium . * Use CVE identifiers. . onionshare (2.6.3-1+deb13u1) trixie; urgency=3Dmedium . * Update debian branch in gbp.conf. * Fixes CVE-2026-54707. (Closes: #1139716) Backport upstream patches from 2.6.4: - a090e97193efc91fbeac9dace7793ea568b83cf5 - e4ed559908b55cf41b993ed3d02052911025785b - 1d76494f5d819adc4c69f08f3842d564a425aa89 * Fixes CVE-2026-54706. (Closes: #1139717) Backport upstream patches from 2.6.4: - 48f31cfac077fcc9c04c67c2a6dbf87d956f5eec - 96827bdd0580bd34b921a7b269198f65434178d8 - d0697fa3d05a193138c6052422c313612301d98a Checksums-Sha1: e7866becb12d3c4fca66b70a1b2744882abd01a1 3241 onionshare_2.6.3-1+deb13u2.dsc dddb51d8f667cc28622131595a38d8d4c9c969ff 121712 onionshare_2.6.3-1+deb13u2.d= ebian.tar.xz d40a18caea8fb69d61f6538ccb52d8672c693db5 10832192 onionshare_2.6.3-1+deb13u2= .git.tar.xz 0abc8c7574b1ed77b4129e45af50b427ff85cebc 17548 onionshare_2.6.3-1+deb13u2_so= urce.buildinfo Checksums-Sha256: 88a5b5bfc7b19c0ae85a19ec156af5cca3e3802196216a922cb99fa6b6696ff6 3241 onions= hare_2.6.3-1+deb13u2.dsc 6fe50d63f049c10f7a5874af9346302db3af128da822339fba103008e18058c5 121712 onio= nshare_2.6.3-1+deb13u2.debian.tar.xz 92b80705616150932a5a5a1e8a4fc991358398f55ca86d16935e1d7ef8a27fd6 10832192 on= ionshare_2.6.3-1+deb13u2.git.tar.xz ed642983d113f73ca55aae8f233aa3962cdf382c7681c350699d64171f8a9402 17548 onion= share_2.6.3-1+deb13u2_source.buildinfo Files: f0fa9d51a467d7de6db08cdfbe010a76 3241 net optional onionshare_2.6.3-1+deb13u= 2.dsc a63c0ab206e7b014cf0a6ecfbb94f1a4 121712 net optional onionshare_2.6.3-1+deb1= 3u2.debian.tar.xz bcab60499f38ff3a02c62a60a73904ff 10832192 net optional onionshare_2.6.3-1+de= b13u2.git.tar.xz 2c87bf381f402e4903c610aeec450a45 17548 net optional onionshare_2.6.3-1+deb13= u2_source.buildinfo Git-Tag-Info: tag=3Dd34ecd1b56643732ed52dd8d619c8b2ae051af85 fp=3D39ec11a0201= 6b72926491a06e3adb00850605636 Git-Tag-Tagger: Sandro Knau=C3=9F <hefee@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmpSfg4ACgkQYG0ITkaD wHnvqA//eZbBhYPWa0SUnZOLNlqmVConFVawrjM+ORbc5lcLn5wsg66es6yedrh7 3hg5MYymQqll7WJTmKHOx3e3ysXQfIWoT0L0VxP6SC5VF+hFsEze/7BKs8juxI+X RMlCpbBiRknpy0841FgC0UIpLd8gHcrATk862O8ijDUMkRkQ/jlfaNHH+oVXMWRY tWrYZpD1Nz5Olgo+Huwusgj5iwUX0drQ5z7jFHHMnF2/MGeuvXhZzHa5zmKrN0Ir j5iG/AoApkwF6/31u7aYSikcO/oUPwinnMVtrmFD1pVBUYHQXVgbNbfMVnfA40MT Wn5xXBFMfqFmCDNYr4oJObPUkrSIwuV3Rk86BpRpGaj3XUubsvoMOKHR+Y9GPsvL gNIP7KnsjyYQIanenhoSk+CecgJrf+gGDx0BF3lFg7ppzkZUqCN3MGjA50Zfbj57 uDb/JYyVPZU5OJCr5KH/0oh+EcUZ7UzC5ezoYBoVvnTmZtytoj/4Mfp1csf2UxQE pAqGB8dVeL9hmYKGB8zFvkZqL533+1iEihfhcxDL8xLElJTf0zKufeTWqWYpZpOt KlNY7Lva1qSDex6dXkGTMmTcauPaRPxxvgItBKdpjFAxo9JZRN2geTnUwGTn9Pey zGW169zN0SrlD4znORCfm6eiVv/VVn2/XVJ3++8b2+e6lJ2kRhs=3D =3DWN5x -----END PGP SIGNATURE----- --===============1495245022161958084== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCalSihwAKCRCb9qggYcy5 IcNgAP0S5HxYgtTiuR/MZ1yd8NnJv3LTWPWxdwjn2abIPVHndAEAz6h0Cc4kzYzG lDo1vVNwPWb66zwS5++LTumaQkYWUQE= =vafK -----END PGP SIGNATURE----- --===============1495245022161958084==-- ]