This package provides a library and a command-line tool named wormhole,
which makes it possible to get arbitrary-sized files and directories from
one computer to another. The two endpoints are identified by using identical
"wormhole codes": in general, the sending machine generates and displays
the code, which must then be typed into the receiving machine.
Provides
Requires
License
MIT
Changelog
* Mon Sep 14 2026 Steve Kowalik <steven.kowalik@suse.com>
- Add missing {Build,}Requires on qrcode.
* Thu Jul 23 2026 Dirk Müller <dmueller@suse.com>
- update to 0.24.0 (bsc#1272449, CVE-2026-42448):
* **SECURITY**: @marduc812 noticed that there is also a missing
"basename()" when a receiving user specifies an output
directory (via "--output") that already exists. Users on past
releases can mitigate this bug by ensuring that any specified
"--output" filename is not an already-existing directory.
CVE-2026-42448
* Fri Apr 24 2026 Mia Herkt <mia@0x0.st>
- Add missing runtime dependency on python-noiseprotocol
(required for dilation feature)
- Update to version 0.23.0
* SECURITY: Regression that deleted "basename()" usage, exposing
receivers to path-name traversal attacks.
Affected versions: 0.21, 0.22
- Changes in 0.22.0:
* Errback pending receive_record() calls on connection loss
gh#magic-wormhole/magic-wormhole#686
* Display / suppress QR code with WORMHOLE_QR=0
* Document the CLI more completely
gh#magic-wormhole/magic-wormhole#609
- Changes in 0.21.0:
* Produce errors for unwanted incoming subprotocols when user
code asks
gh#magic-wormhole/magic-wormhole#660
* Correct types in Dilation subprotocols
gh#magic-wormhole/magic-wormhole#665
* Do not overwrite local directory specified with --output-file
gh#magic-wormhole/magic-wormhole#667
- Changes in 0.20.0:
* Remove 'u' prefix to strings
gh#magic-wormhole/magic-wormhole#636
* Use classes directly instead of type() calls
gh#magic-wormhole/magic-wormhole#637
* Doc: remove details about python2 types
gh#magic-wormhole/magic-wormhole#638
* Add 'hints' information to Dilation status updates
* Replace formatted strings to f-strings
gh#magic-wormhole/magic-wormhole#642
* Properly display QR codes on dark-mode displays
gh#magic-wormhole/magic-wormhole#651
* INCOMPAT: the Dilation extension now enables composition of
subchannels, giving each a named subprotocol along with a new
API to support it (also removes the generic "control"
subchannel)
* Improve ping-timeouts on Mailbox connection
gh#magic-wormhole/magic-wormhole#646
* Update old syntax
gh#magic-wormhole/magic-wormhole#658
* Fix bare pytest
gh#magic-wormhole/magic-wormhole#656
* Add magic-wormhole CLI command
gh#magic-wormhole/magic-wormhole#640
- Changes in 0.19.2:
* Properly update all meta-data + docs regard