Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4aa9d5e7 by Salvatore Bonaccorso at 2026-07-14T06:08:04+02:00
Two CVEs assigned for onionshare issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22206,11 +22206,11 @@ CVE-2025-10237 (During an internal security
assessment, a potential vulnerabilit
NOT-FOR-US: Lenovo
CVE-2024-58350 (Ghidra before 11.2 contains a use after free vulnerability in
the Slei ...)
- ghidra <itp> (bug #923851)
-CVE-2026-XXXX [OnionShare follows symlinks in shared directories, allowing
unintended disclosure of local files]
+CVE-2026-54706 [OnionShare follows symlinks in shared directories, allowing
unintended disclosure of local files]
- onionshare 2.6.4-1 (bug #1139717)
[trixie] - onionshare <no-dsa> (Minor issue)
NOTE:
https://github.com/onionshare/onionshare/security/advisories/GHSA-22p9-r2f5-22mf
-CVE-2026-XXXX [OnionShare Receive mode writes uploaded files even when file
uploads are disabled]
+CVE-2026-54707 [OnionShare Receive mode writes uploaded files even when file
uploads are disabled]
- onionshare 2.6.4-1 (bug #1139716)
[trixie] - onionshare <no-dsa> (Minor issue)
NOTE:
https://github.com/onionshare/onionshare/security/advisories/GHSA-v833-3823-cmhp
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4aa9d5e700998e23043f769eb7809a3744ad85fa
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4aa9d5e700998e23043f769eb7809a3744ad85fa
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
