-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 23:30:00 +0000 Source: yelp Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym Architecture: ppc64el Version: 42.2-4+deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Aron Xu Description: libyelp-dev - Library for the GNOME help browser (development) libyelp0 - Library for the GNOME help browser yelp - Help browser for GNOME Closes: 1136299 Changes: yelp (42.2-4+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * sandbox escape via ghelp: URIs loaded by help pages, allowing a malicious help document to read arbitrary files (e.g. via /proc) and exfiltrate them over the network (Closes: #1136299). Checksums-Sha1: 44f4dd4aa2a64deb1c4a379889c4d586e5b874a2 75352 libyelp-dev_42.2-4+deb13u1_ppc64el.deb 72bc0cddcea04d02c2f7e24f94b3dae6372d2473 388692 libyelp0-dbgsym_42.2-4+deb13u1_ppc64el.deb c426656af5140f344af2ed0844d200b6dd634ad0 168200 libyelp0_42.2-4+deb13u1_ppc64el.deb 36f4c084d79385d0198dd93e697b82922696c985 64108 yelp-dbgsym_42.2-4+deb13u1_ppc64el.deb 8a2c5f23686a4ac5c26dc399c129ed71072b576f 20239 yelp_42.2-4+deb13u1_ppc64el-buildd.buildinfo 0a1d7ab6a71d8958821209d3a98cb3096675ba59 779692 yelp_42.2-4+deb13u1_ppc64el.deb Checksums-Sha256: 95c172f712f8f72e2f651958ca5584f97f79cf247fcf7497226635b633ecced4 75352 libyelp-dev_42.2-4+deb13u1_ppc64el.deb 747a4d7c579e047269c00f71c2f9da4469f175d3054b27db6a60b9d34b30f759 388692 libyelp0-dbgsym_42.2-4+deb13u1_ppc64el.deb 941b182a48a5b8b8ef5cbbc370646a9e0bf13b6e1f6aa3b2c654c93eb9a30640 168200 libyelp0_42.2-4+deb13u1_ppc64el.deb c630d6703890f2b4cbe1080027ec3bc0390a9d19c650f417dbf89277c6574939 64108 yelp-dbgsym_42.2-4+deb13u1_ppc64el.deb 4729131f178c67e307917b91b3eb2b548f5dbb724612437767443399c023b22b 20239 yelp_42.2-4+deb13u1_ppc64el-buildd.buildinfo 6d97920e5bd1107e8c57a2c5242144a35fa34783fa689e666af8e1c25a562656 779692 yelp_42.2-4+deb13u1_ppc64el.deb Files: 305b072b2692ab1f565374bfae2ab6c3 75352 libdevel optional libyelp-dev_42.2-4+deb13u1_ppc64el.deb 771565fc47ba1354867493ce07bc0cf9 388692 debug optional libyelp0-dbgsym_42.2-4+deb13u1_ppc64el.deb 25d2d225ada144566a32f8fc90a2f7f3 168200 libs optional libyelp0_42.2-4+deb13u1_ppc64el.deb 14fc960bca6fc6ff462078be1e0d303e 64108 debug optional yelp-dbgsym_42.2-4+deb13u1_ppc64el.deb 659ce8bd5146f494315f9cb362c9aa76 20239 gnome optional yelp_42.2-4+deb13u1_ppc64el-buildd.buildinfo 04472c551a6332421d18def843f69fdc 779692 gnome optional yelp_42.2-4+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmodRP4ACgkQDNLUPhbm g7N1rg/9H6/60j6IYY16BNlnWk4RSwgdLuX97rinviMew8k9Keo4rHkh+C3dXA3E iJWXI+zvNWL9VMI1lb2rf7r9TP96GSMwbYqgyFssDfQrjsUaVCfSPxNXj1ph86qh PW3Vd/Z1perihBCNrhd/upUf1P9Hzc0zcNt1CIMLKvZdPRf7hpdEqR+AdVojie1M LE96I1XfAexjz+21e1SHImgP267h5oNP10q1cFWHjC3vMD78VOQNO5E/3e/eB+TA BXKyj/g8GsGR1BffqHUmmJsz3w7GwIabtZRvjyAg4k/onCMR2Y1+119FKoNEDWBV kpDJHp10WNsbZzQ0z60mIKzjUUyre2QTGrcUhzw0C0C31DWlQQ8wHkHjxlLAXGo3 aRht3QWbUVofd2TP4tLGsCBRa7MQtk3A9h8f9vIexSy968qDWMEDBZxFIHNascgr OdqxFqliFnMrb+zzj8VQqn9S8ulKgYuNMtGqCIKRA6xFiZfQ92eW73RRZiVruKOJ GpBFZkRUV7q06taf6skXoulHrQvBRE8UjlhJeYoigd0cGRdiQ2ou7QKIqeK/qfxo sgGYJSGqboqqtFxJOYlc1/O1XJ45DnLSAtvTBEJMZzFuQDRahXO5wx3/zPgXc/ZC 4BxTXqT0ntTfGebR15JdM1QGQEYwGQLdNbq/atDaUV8JnZCPOj4= =/7OS -----END PGP SIGNATURE-----