USN-7989-1

Details

Pengo Wray discovered that The Internet Archive Python Library incorrectly handled certain file paths when downloading files. An attacker could possibly use this issue to write files to arbitrary locations on the file system.

Affected Packages

python-internetarchive

Ubuntu 22.04 LTS

Fixed in:

1.9.9-1ubuntu0.1

python-internetarchive

Ubuntu 25.10

Fixed in:

5.4.0-1ubuntu0.1

python-internetarchive

Ubuntu Pro 20.04 LTS

Fixed in:

1.9.0-3ubuntu0.1~esm1

python-internetarchive

Ubuntu Pro 24.04 LTS

Fixed in:

3.5.0-1ubuntu0.1~esm1

References

REPORT

https://ubuntu.com/security/CVE-2025-58438

ADVISORY

https://ubuntu.com/security/notices/USN-7989-1