Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1262136

Bug#1114635: python-internetarchive: CVE-2025-58438: Directory Traversal in File.download()

From Moritz Mühlenhoff <jmm@inutil.org>
Newsgroups linux.debian.bugs.dist
Subject Bug#1114635: python-internetarchive: CVE-2025-58438: Directory Traversal in File.download()
Date 2025-09-18 22:10 +0200
Message-ID <Lwt73-gnrs-7@gated-at.bofh.it> (permalink)
References (4 earlier) <LtaWZ-e5DH-11@gated-at.bofh.it> <LtVMd-eAWy-7@gated-at.bofh.it> <LvmU1-fzoc-11@gated-at.bofh.it> <LsssV-dzcl-1@gated-at.bofh.it> <LvmU1-fzoc-11@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Mon, Sep 15, 2025 at 03:14:30PM -0400, Antoine Beaupré wrote:
> On 2025-09-11 22:04:03, Salvatore Bonaccorso wrote:
> > Hi Antoine,
> >
> > [Adding CC to team@security.debian.org]
> >
> > Apologies for the delay, we had other issues which needed more
> > attention first.
> 
> np.

Thanks, I'll review the patches tomorrow.

Cheers,
        Moritz

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

Bug#1114635: python-internetarchive: CVE-2025-58438: Directory Traversal in File.download() Salvatore Bonaccorso <carnil@debian.org> - 2025-09-07 20:40 +0200
  Bug#1114635: python-internetarchive: CVE-2025-58438: Directory Traversal in File.download() Antoine Beaupré <anarcat@debian.org> - 2025-09-08 16:10 +0200
    Bug#1114635: python-internetarchive: CVE-2025-58438: Directory Traversal in File.download() Antoine Beaupré <anarcat@debian.org> - 2025-09-09 20:10 +0200
      Bug#1114635: python-internetarchive: CVE-2025-58438: Directory Traversal in File.download() Salvatore Bonaccorso <carnil@debian.org> - 2025-09-11 22:10 +0200
  Bug#1114635: python-internetarchive: CVE-2025-58438: Directory Traversal in File.download() Moritz Mühlenhoff <jmm@inutil.org> - 2025-09-18 22:10 +0200

csiph-web