-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 23:30:00 +0000 Source: yelp Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym Architecture: armel Version: 42.2-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: armel Build Daemon (arm-ubc-03) Changed-By: Aron Malache Description: libyelp-dev - Library for the GNOME help browser (development) libyelp0 - Library for the GNOME help browser yelp - Help browser for GNOME Closes: 1136299 Changes: yelp (42.2-1+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * SECURITY UPDATE: sandbox escape via ghelp: URIs and external resources loaded by help pages, allowing a malicious help document to read arbitrary files (e.g. via /proc) and exfiltrate them over the network (Closes: #1136299). Checksums-Sha1: 5d54343a76dbd2f2858249ea9fd64987e45e97ce 75268 libyelp-dev_42.2-1+deb12u2_armel.deb e90099de0f477eebe7385232d8483e73777abdcb 328272 libyelp0-dbgsym_42.2-1+deb12u2_armel.deb b329cbdc7a4a8ba8c786132d1654e99594fbab2a 143968 libyelp0_42.2-1+deb12u2_armel.deb a5b1d01e618749d8038b0c577ca36d6e13870c82 64872 yelp-dbgsym_42.2-1+deb12u2_armel.deb dfa4f4f042d0627c4697b27832536d8babe0a988 20535 yelp_42.2-1+deb12u2_armel-buildd.buildinfo bfda35217dc875f87789d2640c954056e953fb42 777060 yelp_42.2-1+deb12u2_armel.deb Checksums-Sha256: 0dd0c07437c89e156d970102dffaec64e68a7c09f202d802053a79b29065be95 75268 libyelp-dev_42.2-1+deb12u2_armel.deb 8e9ce7fba87c9639f5d287fcbaa9dcfac1a65019933a060c666f30fe1e64a45e 328272 libyelp0-dbgsym_42.2-1+deb12u2_armel.deb 9aaf55fcfac8b272eb24362c28cf2d2ca32e3efcf358f234e88790a2b57489a3 143968 libyelp0_42.2-1+deb12u2_armel.deb f6f98b861258fe87260d7f7ab6cd36116d62c8f353d5a45ceb14095aa6319b9d 64872 yelp-dbgsym_42.2-1+deb12u2_armel.deb a1381e1141c3eb6e2ff499b2f87f0b98bf848d3cfc378d425dc3f0dfcc34b45e 20535 yelp_42.2-1+deb12u2_armel-buildd.buildinfo 0ac4f496266af2c1961f5a8b49ef56c9365b824f12a0698d41e7e0ec69b3e36c 777060 yelp_42.2-1+deb12u2_armel.deb Files: a6d82d41a0870518da00666540b5bf5a 75268 libdevel optional libyelp-dev_42.2-1+deb12u2_armel.deb ddefab80014dc5c90dd2012ceb15ec14 328272 debug optional libyelp0-dbgsym_42.2-1+deb12u2_armel.deb f1ea47deadd1141ee84afa5a289d42b4 143968 libs optional libyelp0_42.2-1+deb12u2_armel.deb ded7c70f014421129f6b44f285523e54 64872 debug optional yelp-dbgsym_42.2-1+deb12u2_armel.deb c763c04b1c80064a33a25dda43b7ce2b 20535 gnome optional yelp_42.2-1+deb12u2_armel-buildd.buildinfo 0777f3e57b7c245f93581bc8d2db845d 777060 gnome optional yelp_42.2-1+deb12u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmodRRkACgkQvzDqKQSG l8WjcRAAiToHf11lJRMY2+xZW/lnffs5yHY6PrLjx1c3PvCNLm7O1Ju/ILneHEVf +Ad36TuVNEDVgRq26FBOhSkfY6NkSG9bA/ck3FXXHvQgnleetRWltzP0/4VoW3WW HENg/b5sG+qoA6MW6btH4NogQpOJg9ntXHf2ju8JMWk7n3fjSbA5RK8lff3Jz3N7 JFAaBDFeHd6j/vnZoz2nWOkwYOjrpZBcXwEN+xjHcK3LR3Pvj84ceCL18icAJSCQ 34BW3q2DNWdijfivEbvWLyr3D+IwQWBaRBGsfO/JNZ4c3mOb96fla52bJMhPdKR/ vx0jJKaW4HrBTzcmsjMqOJSl+aZvRNHNo2lP/DUHrUXGpfmVgpjYObSxG2se4mZJ YJP8UrVEWQj4loKja7mZY3TAHSqjUuI0rslal5mgDk0/dS9Xat1i6Xn22zZm7Deb 3zDmm0vJT3k7lYm+di6ei2BO2rA0Sm90B4cRkQaV8z/auLTCtMZMi/3JMnyWBSak bQyx7EHofa54vRsAwGvZQjkHHnOD95ewsKm9sSvmTgQGHS/dMwaUIB+ddkoo/i2T YKpfD5EHEEJXqZUfUFIYN+G6X7aySSvo8v+RlAxWsa1ZMoZp/cpKwloXV7uN8bBJ ck4kOFogPFTJx3EEmgmQWTS/Q2RBxU38fCEntBfxIl0OugbxFzY= =yDxK -----END PGP SIGNATURE-----