-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 May 2026 23:30:00 +0000
Source: yelp
Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym
Architecture: arm64
Version: 42.2-4+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libyelp-dev - Library for the GNOME help browser (development)
 libyelp0   - Library for the GNOME help browser
 yelp       - Help browser for GNOME
Closes: 1136299
Changes:
 yelp (42.2-4+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * sandbox escape via ghelp: URIs loaded by help pages, allowing a
     malicious help document to read arbitrary files (e.g. via /proc)
     and exfiltrate them over the network (Closes: #1136299).
Checksums-Sha1:
 bb7bcc0e6788a5776e0de9a59a7d4699bc7881ad 75348 libyelp-dev_42.2-4+deb13u1_arm64.deb
 acf04c7e8fb78e5371e1e2f8ef6da49fc204552d 377608 libyelp0-dbgsym_42.2-4+deb13u1_arm64.deb
 388d0ff94c4597eada990a91ceec40669407f520 154668 libyelp0_42.2-4+deb13u1_arm64.deb
 475b291f533408d19a521d2b9751f6f786fef5a3 62408 yelp-dbgsym_42.2-4+deb13u1_arm64.deb
 f356cc6164e4e03964d072c211e554398cfb68e9 20206 yelp_42.2-4+deb13u1_arm64-buildd.buildinfo
 81b9edd4bf0044451bf5cbd7bb14fe5c64451a63 777464 yelp_42.2-4+deb13u1_arm64.deb
Checksums-Sha256:
 71b67871f48eff3cac8a90f27117b08c3f3981aa0296a3ff26c6745cf4cc75d9 75348 libyelp-dev_42.2-4+deb13u1_arm64.deb
 57e6a9f8fb2b9e5ae7173be62015f72601c4893d750382d362626345aac7e3c5 377608 libyelp0-dbgsym_42.2-4+deb13u1_arm64.deb
 40237cb6c25144905149f19f330a0f488226099653606d8adb42cbaccc9dd573 154668 libyelp0_42.2-4+deb13u1_arm64.deb
 f67c5a8f424ff11862ea9a26d27b422657d0efeeec951524292434784df6c951 62408 yelp-dbgsym_42.2-4+deb13u1_arm64.deb
 4af8733fe396f313ff4b7a5b8f8994d83a10d9c43f92467d958b7522a1f254c0 20206 yelp_42.2-4+deb13u1_arm64-buildd.buildinfo
 b2f1123e3236ced6f00a6bd27d0c8be83d4978e00f0a5a790a836d9d3fc886ae 777464 yelp_42.2-4+deb13u1_arm64.deb
Files:
 b1a7f39453d141dca51ddfe51a822d82 75348 libdevel optional libyelp-dev_42.2-4+deb13u1_arm64.deb
 05ea5dff3f77fe2c039c27ff504f5ed2 377608 debug optional libyelp0-dbgsym_42.2-4+deb13u1_arm64.deb
 c9beb62c374baceb9129ac6d93db345c 154668 libs optional libyelp0_42.2-4+deb13u1_arm64.deb
 026afb74f51fd4d6d92036db3c45ad97 62408 debug optional yelp-dbgsym_42.2-4+deb13u1_arm64.deb
 e95621e725237364b08dbdc87736dbdf 20206 gnome optional yelp_42.2-4+deb13u1_arm64-buildd.buildinfo
 dd416a101135603c784e25c57db43727 777464 gnome optional yelp_42.2-4+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=FTMZ
-----END PGP SIGNATURE-----