CVE-2025-58438

CVE-2025-58438 affects the Python Internet Archive library (lib/python-internetarchive) with a directory traversal in File.download(); vulnerable in 5.5.0 and below. The issue is fixed in 5.5.1. Debian/Ubuntu advisories confirm package upgrades are required (e.g., Debian DLA-4314 and USN-7989-1)....