-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 23:30:00 +0000 Source: yelp Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym Architecture: armel Version: 42.2-4+deb13u1 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-conova-02) Changed-By: Aron Xu Description: libyelp-dev - Library for the GNOME help browser (development) libyelp0 - Library for the GNOME help browser yelp - Help browser for GNOME Closes: 1136299 Changes: yelp (42.2-4+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * sandbox escape via ghelp: URIs loaded by help pages, allowing a malicious help document to read arbitrary files (e.g. via /proc) and exfiltrate them over the network (Closes: #1136299). Checksums-Sha1: 123f2ea888d4d4b3bb352e61d9e33092a476adc8 75344 libyelp-dev_42.2-4+deb13u1_armel.deb 21946deba4921dd5076e577665fb7e553a9fb54d 367372 libyelp0-dbgsym_42.2-4+deb13u1_armel.deb b51b087b7a950bc1b56fb1e359e5152a97b30441 145560 libyelp0_42.2-4+deb13u1_armel.deb d94230588b3db75d6a6a3ca61bf221d591b76c73 61908 yelp-dbgsym_42.2-4+deb13u1_armel.deb 628b8b9a8279a4a3ac76c00d64dc913a3587b3d6 19906 yelp_42.2-4+deb13u1_armel-buildd.buildinfo c6f393d11cc2e6243d3e241f4701052b1c715fbe 776104 yelp_42.2-4+deb13u1_armel.deb Checksums-Sha256: 308d55b3e576c3b5d5be7faca361b51842b365822d0ccfc699192441fb39fd01 75344 libyelp-dev_42.2-4+deb13u1_armel.deb 58a0bdcc5b93c25214d42be6a38599042d1ac206390a6ba3aeabe707fabb415c 367372 libyelp0-dbgsym_42.2-4+deb13u1_armel.deb 0a3411de3d71c7959fb77b45e344c437a7a88f9e5b7cdf3311c2e008b7385937 145560 libyelp0_42.2-4+deb13u1_armel.deb 20e32a601e2a6a0aaab672518c0f2f61857c24fa396b40b922ccdfefbd062bd1 61908 yelp-dbgsym_42.2-4+deb13u1_armel.deb 0629ac38e08017d2e3081cd6ba497e994bada9f9af964ed0a92a4ef8dad6c82d 19906 yelp_42.2-4+deb13u1_armel-buildd.buildinfo 9bf8b7188f1076761356b2bd2eca62f8735648156fbf20b0db98b1a69207333f 776104 yelp_42.2-4+deb13u1_armel.deb Files: ffd82078fb9eab7aff3a3eb8e3096d01 75344 libdevel optional libyelp-dev_42.2-4+deb13u1_armel.deb daa401c6bc916c4ea7ee757982a7093c 367372 debug optional libyelp0-dbgsym_42.2-4+deb13u1_armel.deb 38b34f4deb0171d247ab449103286768 145560 libs optional libyelp0_42.2-4+deb13u1_armel.deb 0766e1f70346fbc83bbd25ddcdd3cd2b 61908 debug optional yelp-dbgsym_42.2-4+deb13u1_armel.deb 6f3010522ab6b535ed77bc3900d4da75 19906 gnome optional yelp_42.2-4+deb13u1_armel-buildd.buildinfo 66b21bd251dba6f25f5c1c00acfd438f 776104 gnome optional yelp_42.2-4+deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmodRP4ACgkQOQKMdMnE H5M1kRAApp6y72xAZOyGHKrr/RxDrQErfOPYUd35JdbH5HQCKWZKHEIFrt/QOr7+ nnpdfZWFNk1K1+NVmOBB1Cd5f6i0eNpHydIrYM/dMZg6fuI3mxOBR9oMH9JHNWR7 42937xhcqBW6Z23TE+tFoW/yvvwOWByfAGCscHsFnY8rThgtk6EAUpu6NYJYyJw0 yVOJnXGNCVi3t/0uCH7c5xf/fhYZajOfOCve2MfkWj/ofxKDUeFjaZpfF69ooNib 3q6PXLr6E6EYfXBU34BAW7+XJfHRfRVJ3lFJ0u+5kvASRerg0BqXTr0PHeE5mJeB B0cd29x2ML8OZku2okjJGUe1SAVK4HabznD/47kHuZwZFkaCJ89GOJxp6/lYyn5T H1+Cd7fIgtgjfwnFvCq4NJk/hqaHMbmFr5U3r476i3j7/48Oawuqw0H7Jhr0wN9S 83z2gIyYRr14XZSbF/h1RdUuREjscqgl4eheCj8+1crvVY5C+GCtqqKZZWu+2QAF wUFA1UzcVVU3UzsWXVoQyO71882AaCGOlh8QkwUz4aEQAgU+iIf0QhOYnydgxtAY vCaG7Lixp1BQAKuYne0Waq29NjsQBnOpPMxjYFazq7FAbfyyhEI/QAqgV8q67dek RHICTbqvL+bqM9uHycGoULE/e7crD1QCk1taQKb0ouiBKN2gtSo= =G6G6 -----END PGP SIGNATURE-----