-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 09 Sep 2025 13:26:36 -0400
Source: python-internetarchive
Binary: internetarchive python3-internetarchive
Architecture: all
Version: 5.4.0-2~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Antoine Beaupré <anarcat@debian.org>
Description:
 internetarchive - commandline interface to archive.org
 python3-internetarchive - Python interface to archive.org
Closes: 1114635
Changes:
 python-internetarchive (5.4.0-2~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * backport fix for directory transversal issue (Closes: #1114635,
     CVE-2025-58438)
Checksums-Sha1:
 023f12ffe00b25f0d8b728d316536571bc3d1092 25940 internetarchive_5.4.0-2~deb13u1_all.deb
 5eb3172fe93d619f1ea8fafee6dc5bc33c23ac2b 7303 python-internetarchive_5.4.0-2~deb13u1_all-buildd.buildinfo
 3d6be05269f9527f506a247c906680edc2f65739 79932 python3-internetarchive_5.4.0-2~deb13u1_all.deb
Checksums-Sha256:
 397f1c52e827b1080c59053a25b4ecacf43b95be5862d0703ac4699a5e1c4cf0 25940 internetarchive_5.4.0-2~deb13u1_all.deb
 862f09a07fd32300d904b625a6da8ba7826e2a9b51b79a015c6906eaa05d019e 7303 python-internetarchive_5.4.0-2~deb13u1_all-buildd.buildinfo
 f9dc448e62f7fd1fa98892c84b0edaf20f8f977b5a7aa113d14c0ef08da80e61 79932 python3-internetarchive_5.4.0-2~deb13u1_all.deb
Files:
 0ee71dc3e46762a624b356583dbbb7a9 25940 utils optional internetarchive_5.4.0-2~deb13u1_all.deb
 90ce976c5ae35ecc3c4a00d21bfd3a16 7303 python optional python-internetarchive_5.4.0-2~deb13u1_all-buildd.buildinfo
 f876c158ee4ee9f4806e18b11f02f13e 79932 python optional python3-internetarchive_5.4.0-2~deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=4PtY
-----END PGP SIGNATURE-----