Your message dated Thu, 13 Dec 2018 16:20:07 +0000 with message-id <[email protected]> and subject line Bug#915859: fixed in onionshare 1.3.2-1 has caused the Debian Bug report #915859, regarding uses a fixed filename in /tmp to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 915859: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915859 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: onionshare Version: 1.3-1 Severity: grave Tags: security onionshare uses /tmp/onionshare_server.log as a logfile with --debug. in onionshare/web.py: | def debug_mode(): | temp_dir = tempfile.gettempdir() | log_handler = logging.FileHandler( | os.path.join(temp_dir, 'onionshare_server.log')) tempfile.gettempdir() returns /tmp. It does not give you a dedicated temp-directory. It is not mkdtemp. -- | .''`. ** Debian ** Peter Palfrader | : :' : The universal https://www.palfrader.org/ | `. `' Operating System | `- https://www.debian.org/
--- End Message ---
--- Begin Message ---Source: onionshare Source-Version: 1.3.2-1 We believe that the bug you reported is fixed in the latest version of onionshare, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Ulrike Uhlig <[email protected]> (supplier of updated onionshare package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 13 Dec 2018 16:20:37 +0100 Source: onionshare Binary: onionshare Architecture: source all Version: 1.3.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Privacy Tools Maintainers <[email protected]> Changed-By: Ulrike Uhlig <[email protected]> Description: onionshare - Share a file over Tor Hidden Services anonymously and securely Closes: 915859 Changes: onionshare (1.3.2-1) unstable; urgency=medium . * New upstream version. (Closes: #915859.) - In debug mode, stop saving flask debug log in /tmp, where all users can access it - Updated Tor to 0.2.3.10. * debian/README.source: - Improve instructions for updating and building this package. * debian/gbp.conf: - Improve rules. * debian/rules: - Adapt. Checksums-Sha1: 83ec2c6d3765cf4e59af5e0ba8d76a7150c41689 2170 onionshare_1.3.2-1.dsc e0ddce8e92ea21a745fe40998acdf01c94696657 436856 onionshare_1.3.2.orig.tar.gz 86c5f0cd693d00b4477094e41005f79214bee566 5676 onionshare_1.3.2-1.debian.tar.xz 0f9d47d1a3fd2917e2a73260f4c7e199665432be 104636 onionshare_1.3.2-1_all.deb a4bcdc442319cb9840baf5d37e05928136168169 12724 onionshare_1.3.2-1_amd64.buildinfo Checksums-Sha256: f94d730256a589d6430f8d5d8b6bd1f3b263509c416b14f5ee4c5af2e0c09865 2170 onionshare_1.3.2-1.dsc deb6d2c25a9c0fdb0f37d9ab38a168b028256a4b6015fe6b678224bf33465042 436856 onionshare_1.3.2.orig.tar.gz e2c5b6a0c94d7fffbe62b25d3ef3df3dd325a456d2d9dfd385b9f0bdf751961b 5676 onionshare_1.3.2-1.debian.tar.xz 65dbf0c079a084c2c649cd84cd20d472110fdced0690c90e36f640bb5176578f 104636 onionshare_1.3.2-1_all.deb f45976b955b7af2bbaea1ea6f746f4a7168c64ffcea9f98f71f02306f1b5d329 12724 onionshare_1.3.2-1_amd64.buildinfo Files: 0f60ecbae30490e0da13557ee9cb72c0 2170 net optional onionshare_1.3.2-1.dsc 5316de2e366a9c9cd182742f995276f5 436856 net optional onionshare_1.3.2.orig.tar.gz 0ed8aec88224caddad674438bf1e9c66 5676 net optional onionshare_1.3.2-1.debian.tar.xz 900fbcd2e2673be0262533391f7a2c37 104636 net optional onionshare_1.3.2-1_all.deb b355a507e99549774af95e3c828e80d1 12724 net optional onionshare_1.3.2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEE7eP0RD800mGVFNeQsUuww42GHPEFAlwSfuYSHHVscmlrZUBk ZWJpYW4ub3JnAAoJELFLsMONhhzx8e0P+we2TO5xvW1gfcI5DVdqI5TtpklXxLmj k5wRSCj9I+MxzoHfoqyxJIJ3psJQFG7mJBCMtvcTFq12YOPu7m2efckq/vzd5upu VrQbnrytzPKkZAD7FXtH4CWQzXq2IKjsPJGehNyED+bzl6ATx8Oa4cbW0dv1n4jP A7RaSdOZsko+FUuFUMMuodwHz3+XjQN7cw5mYOTiTDJXj/XaItVgo9M8Hb5R32vx 6fd9tEAITn9y7LFiUOzTmEbB2yyWSKg5zFXdM0HRnyWAZqirVqOvc1y5SMIygWe0 j+uGKx+GNaUrECQJExc0/zQEYPajmx8128ntIvFYdEdQLD4nsezV9JT3UQtcas6q na6ETCFFI0pwrvmT/uIGDO1ugYPrReXRm5LpW7tpOgAcJ0TmdmoI9s7A9FYPmA9W eJMtgMeCnwUdN8syb81PAb/Fk0QECIbm4FVPU+Vz/4TsqGSHZuDNMeXBFCKCccOt N11HhdMBDSpn9acbB5XyBWvplSSNfc4sVSXBMdO1PaHGujKc/5mGNdaM4GJnDCZX rpqafVBOgeVzcdDpevLxBBIht9vw+ZL4URq0nk6ZEmTgMcGaU5MTKBJutcKacziq 88YkiAtZPgNeNcS5fYMjhOPQbhR6iuSUvPkEKoOG/PS9t3gEr5sfbwsEmADXqMb4 DJP5F7WJPmK7 =BUFT -----END PGP SIGNATURE-----
--- End Message ---
