-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 09 Sep 2025 13:26:36 -0400 Source: python-internetarchive Architecture: source Version: 5.4.0-2~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Antoine Beaupré <anarcat@debian.org> Changed-By: Antoine Beaupré <anarcat@debian.org> Closes: 1114635 Changes: python-internetarchive (5.4.0-2~deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * backport fix for directory transversal issue (Closes: #1114635, CVE-2025-58438) Checksums-Sha1: f1c1739adbed7898e309be930b95cb716cdcc651 2290 python-internetarchive_5.4.0-2~deb13u1.dsc 4c803ea8ae19be59c05d4d552cd291ded41a2591 153363 python-internetarchive_5.4.0.orig.tar.gz 781115565b2cc93914c0843792f10b6b00a48d67 18552 python-internetarchive_5.4.0-2~deb13u1.debian.tar.xz 4f88557916dc0d9548fd3ee44dfda67cdb58844c 7542 python-internetarchive_5.4.0-2~deb13u1_amd64.buildinfo Checksums-Sha256: 95892433383ce6333cbda2b87ba886e0ffd8429c6c352d2e5ae7a78a36000500 2290 python-internetarchive_5.4.0-2~deb13u1.dsc 1d03656a3c87395fb5518acda345015c1faaeadad4d87e47edbfc9f7b7821b26 153363 python-internetarchive_5.4.0.orig.tar.gz 13b44d6979ee35862789155cd9981b321e04751bb56568aa22174096615b32be 18552 python-internetarchive_5.4.0-2~deb13u1.debian.tar.xz eb93eab55194a93fb5d35c10fe4fbb22938f72b2ab1caf9e4c1d58ab18c0c2ee 7542 python-internetarchive_5.4.0-2~deb13u1_amd64.buildinfo Files: fad5a333ac34cb82bfac29818320593f 2290 python optional python-internetarchive_5.4.0-2~deb13u1.dsc 341f34bfcd91bee78f772ef5e0f8afa9 153363 python optional python-internetarchive_5.4.0.orig.tar.gz b2b865ca86467ae3027be962f237b42e 18552 python optional python-internetarchive_5.4.0-2~deb13u1.debian.tar.xz 649ace147a2288a979f796fc82d3586f 7542 python optional python-internetarchive_5.4.0-2~deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmj31ZsACgkQEMKTtsN8 TjZLrg//WtVQBAohueGTs1SWaAhGOaOPI6FejOihaDROQHRl4KfknGNiB4JAgYrK w9IokpugBJjDqPIMnIXAzAOF3N/LzUUz6fk26CK/qsT/Jq3iXQRpO1E5Z6i4kXk3 L/Erx854WAQi2qtKjkVL0w3GS5t3nvT2nQrcOlsirhCLIC1MpZxhWeLO78hVtwCV EEFkqStYeEcQUVcBxBYFiCApvcGSr6pfKZgur85cbOYbeDLUa24YQLXUtn+zM6E6 7NM/MMUVlLHC2i9rpfrJmK8ct/qIXEhwhN6UJ/s/BA8l6xGJpzUhQvaXNWATP8pv bdwd5aNlxL1AKOsJlDBreB1VPj7MD6fOPFruX1xGtCZJezMD1LzwtPR5zb9EE0n8 gr9qLk0Ip79V+hV2yBN6ZgGBHvYH+2UJfxD+6a1CnN2eAp4YyY/+w6cvRISk9SBV UKiYzIui10FG9v84KAsyUtHv/OjaEf6faZdbVZZTbtyakzDS+7xf/wrTvxnvVP9o Kmxa78RCr60whKfRMnJ6fVCa2aRjIVNhtmTZhGzBdz7mkCiblI0JRlBOpVKGtNvk idqjxcFLIFMfr9mKwkUAxNAUy3VG3luRX4qVjii1EO5PMMtU/d5qOONtV0x5MVlb l0WRu+LCchZ1gV52mZKxarp+AeSAE0oRjg7NWlmeCKfn5YnYdmk= =x1NY -----END PGP SIGNATURE-----