- version 2.9.3
* relax-async-mode.patch removed (in source)
* Feature: It is now possible to view what URLs are visited in Share/Website mode using the CLI tool, with --log-filenames.
* Feature: It is now possible to automatically start a saved persistent onion tab, once OnionShare itself starts and once Tor is connected.
* Bug fix: It is now once again possible to request bridges and use meek as a Pluggable Transport.
* Bug fix: Fixed a fatal error with Censorship Circumvention when no bridges are returned.
* Bug fix: Fixed an issue with lack of gevent with SocketIO on systems that don't have it.
* Bug fix: Fixed a thread-related race condition segfault with the CLI tool on shutdown.
* Bug fix: Fixed an issue with the 'auto-stop timer' when the CLI tool is being used in 'Share mode' and someone has visited the share at least once. Desktop was unaffected, as were all other modes.
* Locales: Gaeilge, Slovenčina and Tamil languages introduced, and various other translations in existing languages added or improved (thanks to the translators!)
* Documentation: Added examples of using a systemd unit file for persistent onions, and various other clarifications.
* Documentation: Documented all the config file parameters and what they mean, as well as that for persistent onion json files.
* Packaging: Built the snap with a cleanup step in such a way that it should work on Ubuntu 24.04 and higher. Unfortunately, we have to drop support for armhf for now, as there are no PySide6 packages available on Pypi to install for that architecture. However, ARM64 is supported.
* Packaging: Fixed ARM64 packaging for Flatpak.
* Packaging: Many internal packaging improvements that make it easier for us to release snap and flatpak.
* Miscellaneous: Many dependency updates to Python libraries, Tor, Snowflake
* Miscellaneous: Various minor bug fixes/warning messages resolved, and minor changes to some wording for the 'Save this tab' option to make it clearer that this means 'persistent onion address'.
* Miscellaneous: Nicer and more intuitive icons with better dark mode support.
OBS-URL: https://build.opensuse.org/request/show/1248926
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-onionshare?expand=0&rev=56
- version 2.6.2
* Security fix: Removes newlines from History item path
* Security fix: Set a maximum length of 524288 characters for text messages in Receive mode
* Security fix: Allows only specific ASCII characters for usernames and removes control characters
* Security fix: Forcefully disconnect user from chat on disconnect event
* Security fix: Handle username validation excpeptions to prevent silent joining
OBS-URL: https://build.opensuse.org/request/show/1172325
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-onionshare?expand=0&rev=54
- version 2.6.1
* Release updates: Automate builds with CI, make just 64-bit Windows release, make a single universal2 release for both Intel and Apple Silicon macOS
* Upgrade dependencies, including Tor, meek, and snowflake
* Bug fix: Restore the primary_action mode settings in a tab after OnionShare reconnects to Tor
* Bug fix: Fix issue with auto-connecting to Tor with persistent tabs open
* Bug fix: Fix packaging issue where Windows version of OnionShare conflicts with Windows version of Dangerzone
* Bug fix: Fix 'Use a bridge' checkbox state change
* Bug fix: Raise error from waitress if not shutdown
* Patches removed:
fix-test-cli-web.patch
onionshare-pr1677-fix-werkzeug3.patch
onionshare-poetry-core.patch
OBS-URL: https://build.opensuse.org/request/show/1153205
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-onionshare?expand=0&rev=50
- update to 2.6:
* Major feature: a new 'Quickstart' screen, which enables toggling on or
off an animated automatic connection to Tor. This allows configuring
network settings prior to automatic connection.
* Major feature: Censorship circumvention. Use new features in the
upstream Tor API to try to automatically obtain bridges depending on the
user's location.
* New feature: automatically fetch the built-in bridges from the upstream
Tor API rather than hardcode them in each release of OnionShare.
* New feature: keyboard shortcuts to access various modes and menus, and
accessibility hints
* Bug fix: Temporary Directory for serving the OnionShare web pages was
broken on Windows
* Packaging: Packaging is more automated, and Linux Snapcraft releases are
available for amd64, arm64, and armhf
* Miscellaneous: Many dependency updates and web page theming improvements
OBS-URL: https://build.opensuse.org/request/show/1042032
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-onionshare?expand=0&rev=14
* Major feature: a new 'Quickstart' screen, which enables toggling on or
off an animated automatic connection to Tor. This allows configuring
network settings prior to automatic connection.
* Major feature: Censorship circumvention. Use new features in the
upstream Tor API to try to automatically obtain bridges depending on the
user's location.
* New feature: automatically fetch the built-in bridges from the upstream
Tor API rather than hardcode them in each release of OnionShare.
* New feature: keyboard shortcuts to access various modes and menus, and
accessibility hints
* Bug fix: Temporary Directory for serving the OnionShare web pages was
broken on Windows
* Packaging: Packaging is more automated, and Linux Snapcraft releases are
available for amd64, arm64, and armhf
* Miscellaneous: Many dependency updates and web page theming improvements
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-onionshare?expand=0&rev=41
- Additional changes:
* drop python-stem in favor of python-cepa
* relax-async-mode.patch added
* fix-test-cli-web.patch added
* fix for boo#1194866
- Update to version 2.5.0
* CVE-2022-21696: It was possible to change the username to that
of another chat participant with an additional space character
at the end of the name string.
* CVE-2022-21695: Authenticated users (or unauthenticated in
public mode) could send messages without being visible in the
list of chat participants
* CVE-2022-21694:
* CVE-2022-21693: An adversary with a primitive that allows for
filesystem access from the context of the Onionshare process
could access sensitive files in the entire user home folder.
* CVE-2022-21692: anyone with access to the chat environment
could write messages disguised as another chat participant
* CVE-2022-21691: chat participants could spoof their channel
leave message, tricking others into assuming they left the chatroom.
* CVE-2022-21690: The path parameter of the requested URL was not
sanitized before being passed to the QT frontend. This path is
used in all components for displaying the server access history.
* CVE-2022-21688, CVE-2022-21689: Use microseconds in Receive mode
directory creation to avoid potential DoS
* Major feature:
* Obtain bridges from Moat / BridgeDB
* Snowflake bridge support
* New feature:
* Tor connection settings, as well as general settings,
are now Tabs rather than dialogs
* User can customize the Content-Security-Policy header
in Website mode
* Built-in bridges are automatically updated from Tor's API
when the user has chosen to use them
* Switch to using stem fork called cepa
* Various bug fixes
- Drop desktop file, upstream already provides one
- Install metainfo file
- Adjust requirements
- Added relax-async-mode.patch
OBS-URL: https://build.opensuse.org/request/show/967749
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-onionshare?expand=0&rev=11
- update to version 2.3.2
* New feature: Custom titles can be set for OnionShare's various modes
* New feature: Receive mode supports notification webhooks
* New feature: Receive mode supports submitting messages as well as files
* New feature: New ASCII art banner and prettier verbose output
* New feature: Partial support for range requests (pausing and resuming in HTTP)
* Updated Tor to 0.4.5.7
* Updated built-in obfs4 bridges
* Various bug fixes
* 0001-adjust_tests.diff added to skip download test
OBS-URL: https://build.opensuse.org/request/show/898390
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-onionshare?expand=0&rev=22
- update to version 2.3.1
* Bugfix: Fix chat mode
* Bugfix: Fix –persistent in onionshare-cli
* Bugfix: Fix checking for updates in Windows and macOS
* Major new feature: Multiple tabs, including better support for persistent services, faster Tor connections
* New feature: Chat anonymously mode
* New feature: All new design
* New feature: Ability to display QR codes of OnionShare addresses
* New feature: Web apps have responsive design and look better on mobile
* New feature: Flatpak and Snapcraft packaging for Linux
* New dependencies added
* package onionshare-data removed
* singlespec removed
* update alternatives removed (pyside2 issues with python flavours)
OBS-URL: https://build.opensuse.org/request/show/897156
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-onionshare?expand=0&rev=20
- Version 2.2
* fix for desktop icon installation
* New feature: Website mode, which allows publishing a static HTML website as an onion service
* Allow individual files to be viewed or downloaded in Share mode, including the ability to browse into subdirectories and use breadcrumbs to navigate back
* Show a counter when individual files or pages are viewed
* Better History items including colors and status codes to differentiate between successful and failed requests
* Swap out the random /slug suffix for HTTP basic authentication (when in non-public mode)
* Hide the Tor connection settings if the ONIONSHARE_HIDE_TOR_SETTINGS environment variable is set (Tails compatibility)
* Remove the NoScript XSS warning in Receive Mode now that the NoScript/Tor Browser bug is fixed. The ajax upload method still exists when javascript is enabled.
* Better support for DragonFly BSD
* Updated various dependencies, including Flask, Werkzeug, urllib3, requests, and PyQt5
* Updated Tor to 0.4.1.5
* Other minor bug fixes
* New translations:
Arabic (العربية)
Dutch (Nederlands)
Persian (فارسی)
Romanian (Română)
Serbian latin (Srpska (latinica))
* Removed translations with fewer than 90% of strings translated:
Finnish (Suomi)
OBS-URL: https://build.opensuse.org/request/show/746605
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-onionshare?expand=0&rev=4
