Package: python-internetarchive / 3.3.0-2~deb12u1

Metadata

Package Version Patches format
python-internetarchive 3.3.0-2~deb12u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
CVE 2025 58438/0001 Add robust cross platform filename sanitization and .patch | (download)

internetarchive/files.py | 8 8 + 0 - 0 !
internetarchive/utils.py | 135 135 + 0 - 0 !
2 files changed, 143 insertions(+)

 [patch 1/6] add robust cross-platform filename sanitization and
 unsanitization utilities

- Sanitize filenames for Windows and POSIX systems with percent-encoding
- Handle invalid characters and trailing spaces/dots on Windows
- Optionally avoid colon encoding for macOS compatibility
- Provide unsanitize function to decode percent-encoded sequences
- Add helper to sanitize only filename part of a full file path
- Include warnings when sanitization or decoding modifies input

CVE 2025 58438/0002 Encode in sanitize_filename_windows to ensure the en.patch | (download)

internetarchive/utils.py | 5 3 + 2 - 0 !
1 file changed, 3 insertions(+), 2 deletions(-)

 [patch 2/6] encode % in sanitize_filename_windows to ensure the
 encoding is reliably reversible


CVE 2025 58438/0003 Added directory traversal attack check to download.patch | (download)

internetarchive/files.py | 18 16 + 2 - 0 !
1 file changed, 16 insertions(+), 2 deletions(-)

 [patch 3/6] added directory traversal attack check to download


CVE 2025 58438/0004 fixed typo.patch | (download)

internetarchive/utils.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 [patch 4/6] fixed typo


CVE 2025 58438/0005 Added tests for file sanitization.patch | (download)

tests/test_utils.py | 90 90 + 0 - 0 !
1 file changed, 90 insertions(+)

 [patch 5/6] added tests for file sanitization


CVE 2025 58438/0006 Added tests for file sanitization.patch | (download)

tests/test_files.py | 42 42 + 0 - 0 !
tests/test_item.py | 13 13 + 0 - 0 !
2 files changed, 55 insertions(+)

 [patch 6/6] added tests for file sanitization