-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 23:30:00 +0000 Source: yelp Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym Architecture: mips64el Version: 42.2-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Aron Malache Description: libyelp-dev - Library for the GNOME help browser (development) libyelp0 - Library for the GNOME help browser yelp - Help browser for GNOME Closes: 1136299 Changes: yelp (42.2-1+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * SECURITY UPDATE: sandbox escape via ghelp: URIs and external resources loaded by help pages, allowing a malicious help document to read arbitrary files (e.g. via /proc) and exfiltrate them over the network (Closes: #1136299). Checksums-Sha1: 2fb0201852f37e7d58a29156dcda68c142fc6ad3 75280 libyelp-dev_42.2-1+deb12u2_mips64el.deb c4732266ad77fdb1420e07a8fb7e0a59e9bcfd63 357640 libyelp0-dbgsym_42.2-1+deb12u2_mips64el.deb fd070846c47097838399bf3befa82db393d7ea58 143752 libyelp0_42.2-1+deb12u2_mips64el.deb 91db1f21df6d71470d2b781a9a798358f8ea9f8b 66236 yelp-dbgsym_42.2-1+deb12u2_mips64el.deb b10b57fdd13d0b4a34b0cfb550ad38e580072440 20540 yelp_42.2-1+deb12u2_mips64el-buildd.buildinfo c34d913a244f3e785038ddd4975aff9497025940 777868 yelp_42.2-1+deb12u2_mips64el.deb Checksums-Sha256: ae6b454eb43f3e428695aa6fc0e077fa92d06d43d1999baf4a30530491456c2c 75280 libyelp-dev_42.2-1+deb12u2_mips64el.deb 98fbcec75ebc65b728eeb1be24a19dd1421ce2605634b5d43a8e36a1da905783 357640 libyelp0-dbgsym_42.2-1+deb12u2_mips64el.deb 558c10a339584cd587215d23d9e1a1477ad6fdc83079d28430950f90eda4edfc 143752 libyelp0_42.2-1+deb12u2_mips64el.deb 847a0887763e93030a7790254bfd3ca0ba67506e841b0210620352b541ba3ba0 66236 yelp-dbgsym_42.2-1+deb12u2_mips64el.deb 7289f983ee01530f56f710c38458a6c92df7949636d7cfeb9e90e25df3613a43 20540 yelp_42.2-1+deb12u2_mips64el-buildd.buildinfo 28fee13d5ccdac645136eca326ecbad620871f69450305a3f0807b29cbe23d9b 777868 yelp_42.2-1+deb12u2_mips64el.deb Files: fbdcc7575788acb7d4761844d7f6d50f 75280 libdevel optional libyelp-dev_42.2-1+deb12u2_mips64el.deb 67aa9db4958eca370f5f91e1c12cdccb 357640 debug optional libyelp0-dbgsym_42.2-1+deb12u2_mips64el.deb 46c18c69bb788096ae8e2d84be31f12e 143752 libs optional libyelp0_42.2-1+deb12u2_mips64el.deb b71e6a51c43605844df8639b09757005 66236 debug optional yelp-dbgsym_42.2-1+deb12u2_mips64el.deb bd111b7fa073b689351296aee25110ec 20540 gnome optional yelp_42.2-1+deb12u2_mips64el-buildd.buildinfo f44e176bf5f0b8e5d1804a5818beae75 777868 gnome optional yelp_42.2-1+deb12u2_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmodRS4ACgkQ/qmHKZss fSDx6A//ZjeJab8pqg1awTWdjDXZiyXAhYRIruqL/pmQrhbz2eTrvKrXRTV9wND6 dBp0SkRQHXcmt0PIfpSxSiGvXgKFtLRJJ6yL0/6g18+6mUAI7709gL/Hc2VMq0X+ vc4rekVDfqcGWsu3CjOTa4qVzcwVhE2hByWHARloNiiDAEDqeqYFFB3fpf0OIKgu j5+tNciMuBKlPxDUiyFmsWjsCtOY7ioRbx8sAdraxvFtCfqhCeL/G2hgsk60Q/RG lCd+QKOQB335cVv97HwTnvAGXhAJRlzhiP29pBQ+TyTgqLXLoLlPo6mvMXH+Cl5H pKbWAmjrtyCKPRee7K7NqoS8fC4l3FwoUv+RLjqxdJCVfBXrmbqm6El8TRB6yB8R Y+9LESnzJrX7jzZh9uSeqeq/ImeByp6+Nz43SmwSroZhB7ehlNIRGAtO5yPW8t/L sJOn6ydmhBGFxJsVBAzGYnlpKpaKnG1Y9AOc5/kXa3uUg/fjVklCCo8rNOIDaPSP n4QKxum9t7mVfmcxNKAAHQxb2h4kaeSR1UODkD3DxbCrBkCrObHpcj/1unGzGG+v sCIjZ2jpVwgK0/Z8jnp4PDM78rwNaJYIVCOJcs90tH2Q7ex06J3geb9TwH1Tc3YH 3Ob1/Sf6hobzxadFG940T8jfcKxCb9EC7xEyO8wy1k8aFPjwcsU= =ngLU -----END PGP SIGNATURE-----