Alerts This Week
Warning Icon 1 1,003
Alerts This Week
Warning Icon 1 1,003

Ubuntu 25.10 Accessing Important Files in Internet Archive Python Library

ubuntu
Calendar Grey February 4, 2026
Dist Ubuntu Esm H88
The Internet Archive Python Library has a security issue allowing unintended file access in multiple Ubuntu releases. Update necessary.
The Internet Archive Python Library would allow unintended access to files.

Summary

The Internet Archive Python Library would allow unintended access to files.

Software Description:

- python-internetarchive: A Python and Command-Line Interface to Archive.org

Details:

Pengo Wray discovered that The Internet Archive Python Library incorrectly

handled certain file paths when downloading files. An attacker could

possibly use this issue to write files to arbitrary locations on the file

system.

Topics%20covered

Topics Covered

security advisory remote exploit Ubuntu important file access internetarchive

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  internetarchive                 5.4.0-1ubuntu0.1
  python3-internetarchive         5.4.0-1ubuntu0.1

Ubuntu 24.04 LTS
  internetarchive                 3.5.0-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  python3-internetarchive         3.5.0-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  internetarchive                 1.9.9-1ubuntu0.1
  python3-internetarchive         1.9.9-1ubuntu0.1

Ubuntu 20.04 LTS
  internetarchive                 1.9.0-3ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  python3-internetarchive         1.9.0-3ubuntu0.1~esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7989-1

CVE-2025-58438

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7989-1

Topics%20covered

Topics Covered

security advisory remote exploit Ubuntu important file access internetarchive

Package Information

https://launchpad.net/ubuntu/+source/python-internetarchive/5.4.0-1ubuntu0.1
https://launchpad.net/ubuntu/+source/python-internetarchive/1.9.9-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here