-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 May 2026 23:30:00 +0000
Source: yelp
Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym
Architecture: armhf
Version: 42.2-4+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libyelp-dev - Library for the GNOME help browser (development)
 libyelp0   - Library for the GNOME help browser
 yelp       - Help browser for GNOME
Closes: 1136299
Changes:
 yelp (42.2-4+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * sandbox escape via ghelp: URIs loaded by help pages, allowing a
     malicious help document to read arbitrary files (e.g. via /proc)
     and exfiltrate them over the network (Closes: #1136299).
Checksums-Sha1:
 49619deccb8fcf27372f5e12f92697924ef6299b 75352 libyelp-dev_42.2-4+deb13u1_armhf.deb
 85dc7f501e0319e0bac529abb7f2b06d665f3355 372324 libyelp0-dbgsym_42.2-4+deb13u1_armhf.deb
 cf96ba8c7f02ca66044cc23c0b02b6da1018e2b6 146780 libyelp0_42.2-4+deb13u1_armhf.deb
 11bdeaf3ea79eb66f1e19001778b1b3a93074d47 62440 yelp-dbgsym_42.2-4+deb13u1_armhf.deb
 769b275f92eeda71a01f0189d429b412d316a783 20060 yelp_42.2-4+deb13u1_armhf-buildd.buildinfo
 07fe029479d3314e2f51a7d398bb7d6ade57b7bc 776296 yelp_42.2-4+deb13u1_armhf.deb
Checksums-Sha256:
 ddf137c387be1f97b31445bab8b3552ddc4a4518ee1d182d7b464210119aa266 75352 libyelp-dev_42.2-4+deb13u1_armhf.deb
 b7869af8e5110510d7fb8b069cd03a9f255224cf6f5b7d6a373c4de7872d3966 372324 libyelp0-dbgsym_42.2-4+deb13u1_armhf.deb
 eca0f05d5d53dbd3ff46479141e940ec63daa22a973375a9fe9b9455dbe24872 146780 libyelp0_42.2-4+deb13u1_armhf.deb
 1918172ba5ef20e4ec4dcb3386dcc92f82447e5f134c23e1e2c54346f23b50bd 62440 yelp-dbgsym_42.2-4+deb13u1_armhf.deb
 b2378682567c8192476f8d9e897a131ce314bf506ac3c4e3ae5d1c53f28e0d55 20060 yelp_42.2-4+deb13u1_armhf-buildd.buildinfo
 87139b16a7f16bb141e649c6cef4cc5640edae2d76af500dd0c591ea4871160f 776296 yelp_42.2-4+deb13u1_armhf.deb
Files:
 1a698da49c0d926a94be395d83132938 75352 libdevel optional libyelp-dev_42.2-4+deb13u1_armhf.deb
 bcc6f6c316b86e07ca5e92ff9736df4e 372324 debug optional libyelp0-dbgsym_42.2-4+deb13u1_armhf.deb
 83ce50476cb2ce38068ec714ad67b783 146780 libs optional libyelp0_42.2-4+deb13u1_armhf.deb
 20ffbe03e57d488cd2e1eaa283d3577c 62440 debug optional yelp-dbgsym_42.2-4+deb13u1_armhf.deb
 8ce942c5be7d819896a476c66074fe8a 20060 gnome optional yelp_42.2-4+deb13u1_armhf-buildd.buildinfo
 2cc88ca3cae05a54bf0246992f0eec56 776296 gnome optional yelp_42.2-4+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=y8WH
-----END PGP SIGNATURE-----