-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 23:30:00 +0000 Source: yelp Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym Architecture: s390x Version: 42.2-4+deb13u1 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Aron Xu Description: libyelp-dev - Library for the GNOME help browser (development) libyelp0 - Library for the GNOME help browser yelp - Help browser for GNOME Closes: 1136299 Changes: yelp (42.2-4+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * sandbox escape via ghelp: URIs loaded by help pages, allowing a malicious help document to read arbitrary files (e.g. via /proc) and exfiltrate them over the network (Closes: #1136299). Checksums-Sha1: c6a33ab50ec4f0766c22e78226b73fd29084bc47 75348 libyelp-dev_42.2-4+deb13u1_s390x.deb 539c1595930cdca5d06bf4c069922893330f7406 373272 libyelp0-dbgsym_42.2-4+deb13u1_s390x.deb 9bfc6ce02bf701b30538ec412d969fe7a4ea15a6 154568 libyelp0_42.2-4+deb13u1_s390x.deb 886170bac40b3a0198f02282061adb9fb7beb020 61012 yelp-dbgsym_42.2-4+deb13u1_s390x.deb 163922181373ee3312f422d54872fd95417087a7 19938 yelp_42.2-4+deb13u1_s390x-buildd.buildinfo 19ae4a24659f1297ed8672838a7f64077a75a70f 777344 yelp_42.2-4+deb13u1_s390x.deb Checksums-Sha256: ccca58f4e8039f283a2fb217f7ba24902c928d60e97ff8c5e2829aded31b405e 75348 libyelp-dev_42.2-4+deb13u1_s390x.deb 6ea1b8541f06750e6f743fb3c9789c9f64e297afb1fb2ee4e357eb73ec45dd21 373272 libyelp0-dbgsym_42.2-4+deb13u1_s390x.deb 7c91dfc43e99c8057c3f41fde8f75a753f37ec7dde0c81d1cebe736904ec8178 154568 libyelp0_42.2-4+deb13u1_s390x.deb f75d4429465f46ebe3d85655930576bfdf65558102ad73bf670cbea43738839c 61012 yelp-dbgsym_42.2-4+deb13u1_s390x.deb e0bf974ec9ed03f7eba632b78d7bb79c12ea6642d1bedf7ed77b6c96b7164709 19938 yelp_42.2-4+deb13u1_s390x-buildd.buildinfo 1f90e97085b9a8ae41f3f5e58c4685d8cd2b582393c9f45f5366a0794d97af5d 777344 yelp_42.2-4+deb13u1_s390x.deb Files: d341c6a75dd9c62b157960e11a416ea0 75348 libdevel optional libyelp-dev_42.2-4+deb13u1_s390x.deb 5de9e19c39b591289175058d71a05450 373272 debug optional libyelp0-dbgsym_42.2-4+deb13u1_s390x.deb f3eb151df69049b8d35137de2aee9e9d 154568 libs optional libyelp0_42.2-4+deb13u1_s390x.deb a5bfc3daa5764a4ad2661e2b01bc2afd 61012 debug optional yelp-dbgsym_42.2-4+deb13u1_s390x.deb a9f2f3658a34e76ff096152458f7730b 19938 gnome optional yelp_42.2-4+deb13u1_s390x-buildd.buildinfo 8c959a5b62d61b53f0892287215c1f74 777344 gnome optional yelp_42.2-4+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmodRSUACgkQvVOPI7pY NpjslBAAoVBkuW9D+am632Oi/Dg48Bsj3NIYwlHryUxrg6hPpaQ2Y6JEkD8MjW1f BDxIF3oXmI//PsY8kwuloeAEYJ8Wlj4o20m4Sj0DQRDPhc9SCGxNXDOMSlKBMrBL yk/ripBHL44aMqllvo1dxHvEwj1l8z7yprGZRC9kJP5IlD/EpyXzU99GlrmPFOeh w1R3UEOVJ0eMnC+HeEkj6XCGwGyS2HEFlz0f2IX9RlIrn3POCEY6X19fop48itkH xSfVRlaihNP0yzXvaftjHnNPC39ZeLJY/YcJPku+38uzxNF8CWBYJHgWcNmAI2VH afsMLDfoksIbJTfmbnke7w0x7zWBGR6slxLINk8aVbG+lChmYmEpJulDTdHNZZO2 vDnPEE6N+/aoUEjOhMfMwnbsq9ZtVW/5zC22Jb48k413gflDL9Ysbslli+fd8yMF FPGTSQ4Xid6eyDfzpeUvdK1xdQp2H6wQFqv6vbpSGPxnEZsvOyZriCGEnN/CXuvK Ex6kASLY1s8BwW7uiv9umuUfRkMQlxzjQLZv5zfClwberKXeIYB8TjDFUMX8+EEZ weWrMD021bBzfxpYqEmaooTMl0KRhcAwSu14vqIrgX4pCDZLs4xkTEmjZ3LqWSXb 4Eil9bkq44ZjxZQO6HztPkADwnk4EwmuO6uBnqD0f3VTJPokIug= =f+Xb -----END PGP SIGNATURE-----