-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 15 Sep 2025 15:05:48 -0400 Source: python-internetarchive Architecture: source Version: 3.3.0-2~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Antoine Beaupré <anarcat@debian.org> Changed-By: Antoine Beaupré <anarcat@debian.org> Closes: 1114635 Changes: python-internetarchive (3.3.0-2~deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * backport fix for directory transversal issue (Closes: #1114635, CVE-2025-58438) Checksums-Sha1: 7ca8921605471c9f4729f137e3260ef7de646b57 2350 python-internetarchive_3.3.0-2~deb12u1.dsc 24712cf4bee40ae95ae9383230ec74c52d4fd33a 143152 python-internetarchive_3.3.0.orig.tar.gz 9d10b4d75f9cbd4939f307c544c6743d712b4858 18260 python-internetarchive_3.3.0-2~deb12u1.debian.tar.xz 409ea104f5ab1c010e4bd97674d9bb39a7da7e7f 8090 python-internetarchive_3.3.0-2~deb12u1_amd64.buildinfo Checksums-Sha256: 01cdfcbc9dd9569a8d1521f690df95a9b147571e4fb7e3aa22c4ca3e8dbdc0e7 2350 python-internetarchive_3.3.0-2~deb12u1.dsc 6f0d77b83e49a80b442be4190c3afd42f89881490dfb8427675352bf30717676 143152 python-internetarchive_3.3.0.orig.tar.gz dd94f4685797c2dfc756e37a64a2d15918ea3949224ff412449c5a81a65794c2 18260 python-internetarchive_3.3.0-2~deb12u1.debian.tar.xz 8e8325f05ed20780e3ca51293326db2c350f65e743b02698f1c192d20b19612a 8090 python-internetarchive_3.3.0-2~deb12u1_amd64.buildinfo Files: 86a5309723d56a821b6d2e1d345f7938 2350 python optional python-internetarchive_3.3.0-2~deb12u1.dsc 27d7e936c39b6c51a13aa6da3d3547d6 143152 python optional python-internetarchive_3.3.0.orig.tar.gz e67671fe6fa6ee86f5652c909a0fc68a 18260 python optional python-internetarchive_3.3.0-2~deb12u1.debian.tar.xz 524214c8cfea0ecbf238053bdea1b311 8090 python optional python-internetarchive_3.3.0-2~deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmj31ZEACgkQEMKTtsN8 TjZpdRAAsibuC0R5Q5ybYRH9xGjvTJ/6EY/i6yteT6W/ksSoPaCpWf6+F/rr3q03 e4a9t4Wtnn9ZhZP1sxTrxYDg53xT8itiH7sCRkIUHzwEvgytAh5NGk8yGVeBnUpo YSnqe+MVzHXJlb/kY4a+2FTorzYdlPIhGAIebZAS3zHkriqk+umiumAzCrIQi5S1 1MS26Ir4LBD/rStG+AdG6NlO1GLGpmmSsWSBe9la1MN9WVUyjDXeoCWawzgIefik meJ+yIj8wD9DhAscJjR+cTUJ6PQsgGZ5hSjXoj4Rj5I6MeGWG52IOzMNlAdR89Bg PM6uGH1OgLH2Vlun56vrYKImoI++QmAzlgg1vgLGfGD/PP/LV+4IlY4prIRZCgmY V5dE0kcmo3pnmb2pOeyom+92rn+PGKjSssdkeRXGNlU+u5frBugbtUyBklxBT8HB KrAow93SgfHYRhLkXf0Ghdcwvpn2HYzcwzQnyv5sHkpeS2V59C5y2ZoQRKR+DCGS Zk5CNT94TYZ1kk9zTOb82IKm8OC16xUv8qxtRWUfgSxvw2PRGq567TqFf5+JN3w5 Sx3a6i2PWQLX3ZnK+ZrwIQBSfet2LfCA0/DLs8471afgra8y6zGUicBPV9x6SyaQ CdowkH81InxXmEL2TAv8GQYH0BoA5DL/A3ksIULbsIAeSzFBh2A= =jo23 -----END PGP SIGNATURE-----