-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 May 2026 23:30:00 +0000
Source: yelp
Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym
Architecture: arm64
Version: 42.2-1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Aron Malache <aronmalache@gmail.com>
Description:
 libyelp-dev - Library for the GNOME help browser (development)
 libyelp0   - Library for the GNOME help browser
 yelp       - Help browser for GNOME
Closes: 1136299
Changes:
 yelp (42.2-1+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * SECURITY UPDATE: sandbox escape via ghelp: URIs and external resources
     loaded by help pages, allowing a malicious help document to read
     arbitrary files (e.g. via /proc) and exfiltrate them over the network
     (Closes: #1136299).
Checksums-Sha1:
 6b9bacf61a3b3ecf70589d1408c1ca2eec0081c9 75268 libyelp-dev_42.2-1+deb12u2_arm64.deb
 c76b642b3629f6347abd19c54202adf036ee83fa 336416 libyelp0-dbgsym_42.2-1+deb12u2_arm64.deb
 cd4a69152a6e34b52f075083389f4c590d0b75fd 151816 libyelp0_42.2-1+deb12u2_arm64.deb
 ea8736867991b3f77a911b2e78d780d96bad7340 63872 yelp-dbgsym_42.2-1+deb12u2_arm64.deb
 94a06ca25f3740e9d0e3868444353644310935f9 20794 yelp_42.2-1+deb12u2_arm64-buildd.buildinfo
 775a55891b9ed6312e5e0559abf974cd1f4a09e0 778508 yelp_42.2-1+deb12u2_arm64.deb
Checksums-Sha256:
 3b35f10f86cf33398d9c9d5f8317a9adf8573f9a166df7d76d509eb5e3e036d3 75268 libyelp-dev_42.2-1+deb12u2_arm64.deb
 cb7795a78e21f7fa42a8624a50c7663b7d8a4a32dc103fb6bb895b8b05f95069 336416 libyelp0-dbgsym_42.2-1+deb12u2_arm64.deb
 d46a53d35d46433bf37faf3d93f406c22d753d0ea4728029cba032c57152847e 151816 libyelp0_42.2-1+deb12u2_arm64.deb
 7d346890a1e556566848f110c9e410104d4b20d249de24b4aabb0009ff3eb518 63872 yelp-dbgsym_42.2-1+deb12u2_arm64.deb
 85976991ee0104245849502a9ade08473e06d0570b8c70c7e91a7ecf9cb28a72 20794 yelp_42.2-1+deb12u2_arm64-buildd.buildinfo
 b1e4a35a3071472c0b80291c03321f29444f47e8dcddde906532e4a934c1bfae 778508 yelp_42.2-1+deb12u2_arm64.deb
Files:
 939c9fcc8adb78df379cc525c44868e1 75268 libdevel optional libyelp-dev_42.2-1+deb12u2_arm64.deb
 2309321ea8c43d05143d64933b42bc2b 336416 debug optional libyelp0-dbgsym_42.2-1+deb12u2_arm64.deb
 765ef7110de5de3851da50556e762c44 151816 libs optional libyelp0_42.2-1+deb12u2_arm64.deb
 57eb1743824745cc5945ca38117aaf72 63872 debug optional yelp-dbgsym_42.2-1+deb12u2_arm64.deb
 5cfd262026695dc25db783e0653a1d93 20794 gnome optional yelp_42.2-1+deb12u2_arm64-buildd.buildinfo
 530f851d5daf46c1c37ac1e08ca13363 778508 gnome optional yelp_42.2-1+deb12u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=TkC7
-----END PGP SIGNATURE-----