pool/python-onionshare
SHA256
20
0
Fork 2
Code Issues Pull Requests Activity

Accepting request 1362627 from devel:languages:python

Browse Source 
- version 2.6.4 (bsc#1269693, CVE-2026-54707,
     bsc#1269698, CVE-2026-54706):
  * updated dependencies
  * Security fix: Prevent symlink traversal
  * Security fix: Prevent upload of files when file upload mode is disabled. Prevent creation of empty folder on empty POST request payload
  * Dependencies: Updates tor dependencies and other python and web dependencies. Also updates flatpak runtime.
  * Bug fix: Show indeterminate progress and warn user during Tor traversal

    at the end of the name string.
  * Bugfix: Fix checking for updates in Windows and macOS
- fix for dependency error (see https://build.opensuse.org/request/show/807929 )
  initial build on OBS

OBS-URL: https://build.opensuse.org/request/show/1362627
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-onionshare?expand=0&rev=23
This commit is contained in:
Ana Guerrero
2026-07-01 14:35:56 +00:00
committed by Git OBS Bridge
parent fa829873ec db61732606
commit 27afb5b88e
4 changed files with 37 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
python-onionshare.changes
+18 -7
View File
@@ -1,3 +1,14 @@
-------------------------------------------------------------------
Fri Jun 26 05:40:16 UTC 2026 - Axel Braun <axel.braun@gmx.de>
- version 2.6.4 (bsc#1269693, CVE-2026-54707,
bsc#1269698, CVE-2026-54706):
* updated dependencies
* Security fix: Prevent symlink traversal
* Security fix: Prevent upload of files when file upload mode is disabled. Prevent creation of empty folder on empty POST request payload
* Dependencies: Updates tor dependencies and other python and web dependencies. Also updates flatpak runtime.
* Bug fix: Show indeterminate progress and warn user during Tor traversal
-------------------------------------------------------------------
Tue Mar 11 13:31:10 UTC 2025 - Markéta Machová <mmachova@suse.com>
@@ -119,14 +130,14 @@ Fri Feb 25 06:52:51 UTC 2022 - Axel Braun <axel.braun@gmx.de>
* relax-async-mode.patch added
* fix-test-cli-web.patch added
* fix for boo#1194866
-------------------------------------------------------------------
Thu Feb 24 19:33:47 UTC 2022 - Ferdinand Thiessen <rpm@fthiessen.de>
- Update to version 2.5.0
* CVE-2022-21696: It was possible to change the username to that
of another chat participant with an additional space character
at the end of the name string.
at the end of the name string.
* CVE-2022-21695: Authenticated users (or unauthenticated in
public mode) could send messages without being visible in the
list of chat participants
@@ -218,7 +229,7 @@ Sun May 16 09:28:39 UTC 2021 - Axel Braun <axel.braun@gmx.de>
- update to version 2.3.1
* Bugfix: Fix chat mode
* Bugfix: Fix –persistent in onionshare-cli
* Bugfix: Fix checking for updates in Windows and macOS
* Bugfix: Fix checking for updates in Windows and macOS
* Major new feature: Multiple tabs, including better support for persistent services, faster Tor connections
* New feature: Chat anonymously mode
* New feature: All new design
@@ -229,11 +240,11 @@ Sun May 16 09:28:39 UTC 2021 - Axel Braun <axel.braun@gmx.de>
* package onionshare-data removed
* singlespec removed
* update alternatives removed (pyside2 issues with python flavours)
-------------------------------------------------------------------
Wed Jun 3 10:24:26 UTC 2020 - Axel Braun <axel.braun@gmx.de>
- fix for dependency error (see https://build.opensuse.org/request/show/807929 )
- fix for dependency error (see https://build.opensuse.org/request/show/807929 )
-------------------------------------------------------------------
Thu May 21 06:55:37 UTC 2020 - Petr Gajdos <pgajdos@suse.com>
@@ -290,7 +301,7 @@ Tue Aug 13 07:50:48 UTC 2019 - Axel Braun <axel.braun@gmx.de>
* Removed translations because less than 90% of the strings were translated:
Bengali (বাংলা)
Persian (فارسی)
-------------------------------------------------------------------
Fri Feb 22 09:26:00 UTC 2019 - Robert Frohl <rfrohl@suse.com>
@@ -325,5 +336,5 @@ Wed Dec 12 10:29:46 UTC 2018 - Ismail Dönmez <idonmez@suse.com>
Fri Nov 23 17:20:53 UTC 2018 - Axel Braun <axel.braun@gmx.de>
- Version 1.3.1
initial build on OBS
initial build on OBS
thanks to scarabeus_iv for the testing part!
python-onionshare.spec
+16 -21
View File
@@ -1,8 +1,8 @@
#
# spec file for package python-onionshare
#
# Copyright (c) 2025 SUSE LLC
# Copyright (c) 2018-2025 Dr. Axel Braun
# Copyright (c) 2026 SUSE LLC and contributors
# Copyright (c) 2018-2026 Dr. Axel Braun
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,18 +17,13 @@
#
# Always only build one flavor
%if 0%{?suse_version} >= 1550
%define pythons python3
%else
%{?sle15_python_module_pythons}
%endif
%global mypython %pythons
%global mysitelib %{expand:%%{%{mypython}_sitelib}}
%define plainpython python
Name: python-onionshare
Version: 2.6.3
Version: 2.6.4
Release: 0
Summary: Self-hosting Tor Onion Service based file sharing
License: GPL-3.0-or-later
@@ -39,7 +34,7 @@ Source99: python-onionshare.rpmlintrc
# PATCH-FIX-OPENSUSE skip test_large_download in gui tests
Patch0: 0001-adjust_tests.diff
BuildRequires: %{mypython}-devel >= 3.8
BuildRequires: %{mypython}-devel >= 3.10
BuildRequires: %{mypython}-pip
BuildRequires: %{mypython}-setuptools
BuildRequires: %{mypython}-wheel
@@ -50,19 +45,19 @@ BuildRequires: python-rpm-macros
BuildRequires: %{mypython}-poetry-core
BuildRequires: update-desktop-files
# SECTION test
BuildRequires: %{mypython}-pytest
BuildRequires: %{mypython}-pytest >= 7.2.0
BuildRequires: %{mypython}-pytest-qt
BuildRequires: %{mypython}-pytest-xvfb
# /SECTION
# SECTION runtime test
BuildRequires: %{mypython}-Cython >= 3.0.2
BuildRequires: %{mypython}-Flask >= 2.3.2
BuildRequires: %{mypython}-Flask >= 3.1.3
BuildRequires: %{mypython}-Flask-Compress >= 1.13
BuildRequires: %{mypython}-Flask-SocketIO >= 5.3.4
BuildRequires: %{mypython}-Flask-SocketIO >= 5.6
BuildRequires: %{mypython}-PyNaCl
BuildRequires: %{mypython}-PySocks
BuildRequires: %{mypython}-Unidecode
BuildRequires: %{mypython}-Werkzeug >= 2.3.4
BuildRequires: %{mypython}-Werkzeug >= 3.1
BuildRequires: %{mypython}-cepa
BuildRequires: %{mypython}-click
BuildRequires: %{mypython}-colorama
@@ -71,7 +66,7 @@ BuildRequires: %{mypython}-gevent >= 23.9.1
BuildRequires: %{mypython}-gevent-websocket
BuildRequires: %{mypython}-packaging >= 23.1
BuildRequires: %{mypython}-psutil
BuildRequires: %{mypython}-pyside6 >= 6.5.2
BuildRequires: %{mypython}-pyside6 >= 6.8.2
BuildRequires: %{mypython}-python-gnupg
BuildRequires: %{mypython}-qrcode
BuildRequires: %{mypython}-requests
@@ -107,18 +102,18 @@ Requires: tor
Provides: python-onionshare = %{version}-%{release}
Provides: python-onionshare_cli = %{version}-%{release}
# Obsolete old multiflavor packages
Obsoletes: %{plainpython}-onionshare-data < 2.3.1
Obsoletes: python310-onionshare < 2.3.1
Obsoletes: python36-onionshare < 2.3.1
Obsoletes: python38-onionshare < 2.3.1
Obsoletes: python39-onionshare < 2.3.1
Obsoletes: %{plainpython}-onionshare-data < 2.6.4
Obsoletes: python310-onionshare < 2.6.4
Obsoletes: python311-onionshare < 2.6.4
Obsoletes: python312-onionshare < 2.6.4
Obsoletes: python313-onionshare < 2.6.4
%if %{suse_version} >= 1500
# incorrect package name was used until 2024-01-24
Obsoletes: %{plainpython}-onionshare <= 2.6
Obsoletes: %{plainpython}-onionshare <= 2.6.3
%endif
%if 0%{?sle_version} >= 150600 && "%pythons" != "python3"
# obsolete python 3.6 package
Obsoletes: python3-onionshare <= 2.6
Obsoletes: python3-onionshare <= 2.6.3
%endif
BuildArch: noarch
%python_subpackages
onionshare-2.6.3.tar.gz
-3
View File
@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:c5846b807a85568aec2d5430eae32541b3df497af23b4ac937374e2f74a16da2
size 8884941
onionshare-2.6.4.tar.gz
+3
View File
@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3956bd664d3c4251a5e8acad2e5c0c987ae0657e1f3b97c57deb87e3563556db
size 8994061