Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 22.04 LTS: USN-7625-1 Critical Advisory for OnionShare

ubuntu
Calendar Grey July 8, 2025
Dist Ubuntu Esm H88
Numerous vulnerabilities addressed in OnionShare affecting various Ubuntu releases, encompassing severe risks and denial-of-service flaws.
Several security issues were fixed in OnionShare.

Summary

Several security issues were fixed in OnionShare.

Software Description:

- onionshare: An open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network

Details:

It was discovered that OnionShare could be exploited when run with

the --debug argument. A local attacker could possibly use this

issue to access sensitive information. This issue only affected

Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19960)

It was discovered that OnionShare could be blocked from uploading

files. An attacker could possibly use this issue to cause a

denial of service. This issue only affected Ubuntu 20.04 LTS and

Ubuntu 22.04 LTS. (CVE-2022-21689)

Topics%20covered

Topics Covered

security advisory denial of service information leak critical Ubuntu OnionShare

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
  onionshare                      2.2-3ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  onionshare                      2.2-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  onionshare                      0.9.2-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  onionshare                      0.8.1-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

After a standard system update you need to restart OnionShare to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7625-1

CVE-2018-19960, CVE-2022-21689

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7625-1

Topics%20covered

Topics Covered

security advisory denial of service information leak critical Ubuntu OnionShare

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here