-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 May 2026 23:30:00 +0000
Source: yelp
Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym
Architecture: riscv64
Version: 42.2-4+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-02) <buildd_riscv64-rv-osuosl-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libyelp-dev - Library for the GNOME help browser (development)
 libyelp0   - Library for the GNOME help browser
 yelp       - Help browser for GNOME
Closes: 1136299
Changes:
 yelp (42.2-4+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * sandbox escape via ghelp: URIs loaded by help pages, allowing a
     malicious help document to read arbitrary files (e.g. via /proc)
     and exfiltrate them over the network (Closes: #1136299).
Checksums-Sha1:
 834814a436639c1ffed5bed7ca5ce4bbfe7f1f54 75348 libyelp-dev_42.2-4+deb13u1_riscv64.deb
 77c8c41dff8b525a112f8ab5dd2f3f362be1b864 364456 libyelp0-dbgsym_42.2-4+deb13u1_riscv64.deb
 a5eff23e5f491a8b490c12086685635d1516007f 159628 libyelp0_42.2-4+deb13u1_riscv64.deb
 cb2193d2cbe770d5283145c10fd75bd4b2229321 60536 yelp-dbgsym_42.2-4+deb13u1_riscv64.deb
 6b160b0d6e529986b0689debe010ac6e57a76690 20182 yelp_42.2-4+deb13u1_riscv64-buildd.buildinfo
 0106c417d387d8384c3ca17ebf6c4ce0c0995040 777300 yelp_42.2-4+deb13u1_riscv64.deb
Checksums-Sha256:
 9d27f5b3aef326d03c3740af3b775f92248836389da9af3269fbfa05f8a54830 75348 libyelp-dev_42.2-4+deb13u1_riscv64.deb
 c3edc10885261bfc00af5539d7cbdf538522ae990122e9b5b93ac8b645c99d98 364456 libyelp0-dbgsym_42.2-4+deb13u1_riscv64.deb
 a6489eff91789b0fb1b6e35268c9a2a9c2e7bde9f021021f74897e1f9c83927f 159628 libyelp0_42.2-4+deb13u1_riscv64.deb
 18e4207c8def4ed93055976cf86f823260d084ca52c9d4bd950721dddd79c03d 60536 yelp-dbgsym_42.2-4+deb13u1_riscv64.deb
 fb732ee9787c8ec71db1c0f2858d3a70fe1dfb06f71f83bdf7574b02a7214201 20182 yelp_42.2-4+deb13u1_riscv64-buildd.buildinfo
 d6a3386844f5a06986dfe6b2201e3bdd4a3bb30af39a72a74f0e1cd3fd32ca56 777300 yelp_42.2-4+deb13u1_riscv64.deb
Files:
 f3705c15b5e9622e2de5015a0c0985e5 75348 libdevel optional libyelp-dev_42.2-4+deb13u1_riscv64.deb
 202ea7d1b1b6688ab5c88a5cf2cace80 364456 debug optional libyelp0-dbgsym_42.2-4+deb13u1_riscv64.deb
 019706bc0f61146a1722d954ff6ab2c5 159628 libs optional libyelp0_42.2-4+deb13u1_riscv64.deb
 8c4be77518e6ea2f82c85af903a5a057 60536 debug optional yelp-dbgsym_42.2-4+deb13u1_riscv64.deb
 a2b437d22b4e1d819144792bf4c97f0d 20182 gnome optional yelp_42.2-4+deb13u1_riscv64-buildd.buildinfo
 9d80ca89021c48a7fb4eff3a0758bf81 777300 gnome optional yelp_42.2-4+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=3qyC
-----END PGP SIGNATURE-----