-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 23:30:00 +0000 Source: yelp Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym Architecture: armhf Version: 42.2-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-04) Changed-By: Aron Malache Description: libyelp-dev - Library for the GNOME help browser (development) libyelp0 - Library for the GNOME help browser yelp - Help browser for GNOME Closes: 1136299 Changes: yelp (42.2-1+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * SECURITY UPDATE: sandbox escape via ghelp: URIs and external resources loaded by help pages, allowing a malicious help document to read arbitrary files (e.g. via /proc) and exfiltrate them over the network (Closes: #1136299). Checksums-Sha1: 1f779c68da3a5e11bd991854e9d5468d74a225cd 75268 libyelp-dev_42.2-1+deb12u2_armhf.deb 3e30b93077322d1f68a3fceddc5ba014889fd91a 330568 libyelp0-dbgsym_42.2-1+deb12u2_armhf.deb 8d00e3d5de5f680075340e0800051908f73e9a6f 144216 libyelp0_42.2-1+deb12u2_armhf.deb 940e35b9512d4d37e6d11b110dc8e5bc1054ea57 63728 yelp-dbgsym_42.2-1+deb12u2_armhf.deb 274db368c1cdd1e9390d16901f8d744d9d0fe2a4 20638 yelp_42.2-1+deb12u2_armhf-buildd.buildinfo 894a21df2db1ae577d80a1cc10a843361136f4e8 777012 yelp_42.2-1+deb12u2_armhf.deb Checksums-Sha256: e212b54cfea09a5697d37a9c068e7e027e4164b79f3efa54c7dd10431e73bafa 75268 libyelp-dev_42.2-1+deb12u2_armhf.deb 668fcb19d30459f2fdf78688173a2ee6f540fff916b07bb8ff96afd5a191991f 330568 libyelp0-dbgsym_42.2-1+deb12u2_armhf.deb 97b31f2ba14ba499a6bfd71f00a635fa6f43e38c68083575ec3d3cd021af8c6b 144216 libyelp0_42.2-1+deb12u2_armhf.deb ab452c7034a88aaac48262dd7fe66bce2dc721966524d07693c574bb3bf5be00 63728 yelp-dbgsym_42.2-1+deb12u2_armhf.deb dd330beb73c2e2acd49f8067c7afb827169162cdc1fb15c3efb8d5dfb75020e1 20638 yelp_42.2-1+deb12u2_armhf-buildd.buildinfo 86091961e1235f6875a75b255cfedf0fb8ca47bd764b4beb201b6f4a03ec46a2 777012 yelp_42.2-1+deb12u2_armhf.deb Files: 8cd86203f60b7e8f70920b5e720254f8 75268 libdevel optional libyelp-dev_42.2-1+deb12u2_armhf.deb 074ec4d458f0d447c46c5c6a8a6a56b9 330568 debug optional libyelp0-dbgsym_42.2-1+deb12u2_armhf.deb f75275dfe0b7c072af89de22de9a6933 144216 libs optional libyelp0_42.2-1+deb12u2_armhf.deb e4a0ba21eb93df01dcea9855ed977806 63728 debug optional yelp-dbgsym_42.2-1+deb12u2_armhf.deb fded43020340aa91598a497d109bf29d 20638 gnome optional yelp_42.2-1+deb12u2_armhf-buildd.buildinfo b86b6574d41d0734f505f7d68a6352c4 777012 gnome optional yelp_42.2-1+deb12u2_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmodRQUACgkQK1PZBedP sprsbQ/8DPcCpfMBGPMoWb/G7b9Dcc2XSmTVnXfkG4VUuDgCeLVqCdrG+34KC1/X VkcKpkmWwkd6ZpjqZpBNWDLx480VYMdpAHBglJ7Ss2/Yep7gY6sFV5CxsSdTa18E E2jSHLpr+JUjPFNzQqbx9bsvuBwjU4RGMB4UhcZNA3bJXMKyz8l6izj/+FN1mGHD 9tOv5GZbsgCp1ct2Qodjket1pRpHjkIfClHNtMY7hOevHu6Dl9MdVuLxMEo4n86h WXLh6v5QKBNd+D02ldlgJJWo8sLJkkFRnGbsM2Y8IvIzQBjlQQIdrIdFiKfUbEb+ OilTGKTdEs4IeHxluuCh0VGJg2BjgaCpV3RVY0LsdgfPafxO/nHLw16mLRpX9k9N jGZWKcO6ub+QCg3eTaY0S3/AeuNPYuXDhjA5cRj/j5o+U0q1m9JoTmMcV92wsq6K qcFqg2eriu6VQxnkjh1BOLSfLiDqY+/XzBP7qPKzNnwKnmH855ho/zQAGCQLfWgG Il3C29p0XKGOfqqR6ucnow8a807h97LiBQWS22UcEhMka38one5g/WlDxQfIap1D Xhiz0esh4I7M1gpKDQTwS2fc6WwNQ2+yqHnKuMTBaOpPRV0mw9wLW+eKzOIGGzN2 NnTS4WJAfFflMEpY6QbQLbYWH6Aoa0q+fs7W0X/Q1hduHPhcWz8= =2ZrZ -----END PGP SIGNATURE-----