-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 May 2026 23:30:00 +0000
Source: yelp
Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym
Architecture: amd64
Version: 42.2-4+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libyelp-dev - Library for the GNOME help browser (development)
 libyelp0   - Library for the GNOME help browser
 yelp       - Help browser for GNOME
Closes: 1136299
Changes:
 yelp (42.2-4+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * sandbox escape via ghelp: URIs loaded by help pages, allowing a
     malicious help document to read arbitrary files (e.g. via /proc)
     and exfiltrate them over the network (Closes: #1136299).
Checksums-Sha1:
 788005aeddb8f283fd3a75c2f6cab0ea47dfb51c 75348 libyelp-dev_42.2-4+deb13u1_amd64.deb
 a36289fd320c48ffdc837a17a58b979c554432f7 384348 libyelp0-dbgsym_42.2-4+deb13u1_amd64.deb
 6a7e33d5b2d1f1f908886b90186a70d4c175226f 161100 libyelp0_42.2-4+deb13u1_amd64.deb
 f67c6dc25eae0c03d04e353fabc5fb6f110ea86d 62204 yelp-dbgsym_42.2-4+deb13u1_amd64.deb
 81f38b21956c45b85cb40507686d770a8a17e19a 20282 yelp_42.2-4+deb13u1_amd64-buildd.buildinfo
 44f88173f4616a0150abe39cb63f312128e4c528 778140 yelp_42.2-4+deb13u1_amd64.deb
Checksums-Sha256:
 606b07a797fc5e7ea31b0616944a65a05a9315b6e011ca82aea61ca8fc562a10 75348 libyelp-dev_42.2-4+deb13u1_amd64.deb
 07c6bb03430eacb076ce71a9ee2bc5174c174a37f6400184d38257b6972e3930 384348 libyelp0-dbgsym_42.2-4+deb13u1_amd64.deb
 115047761634be8c8615e11e0639f28ceeca11b704cb5d357467059812cfcb96 161100 libyelp0_42.2-4+deb13u1_amd64.deb
 97f4046426deb12b003928e4599fdf761ff2d5bafc0285b3936c40863451e8cd 62204 yelp-dbgsym_42.2-4+deb13u1_amd64.deb
 037c526d8a2b372799f0154f24cabf3c7b8627b9a3851fd6148dcee964cc2b82 20282 yelp_42.2-4+deb13u1_amd64-buildd.buildinfo
 6ac714602844027c5f1bf2c4760ab5ca6df7ec13e3122fbc335a8f49e5407c85 778140 yelp_42.2-4+deb13u1_amd64.deb
Files:
 cdc105ffce5290f42156fb8140b0a52e 75348 libdevel optional libyelp-dev_42.2-4+deb13u1_amd64.deb
 5ce373995683687c7628ffd2a3cd5716 384348 debug optional libyelp0-dbgsym_42.2-4+deb13u1_amd64.deb
 88aa170649fea2ef1d7b0433e427460b 161100 libs optional libyelp0_42.2-4+deb13u1_amd64.deb
 cab1cf4b16fb7ff6b8acbe01bfce746c 62204 debug optional yelp-dbgsym_42.2-4+deb13u1_amd64.deb
 384084c494d6eb5b1b5b63f89c5b2830 20282 gnome optional yelp_42.2-4+deb13u1_amd64-buildd.buildinfo
 bebdc38eaa6bb62d6c156d4dbbcb7032 778140 gnome optional yelp_42.2-4+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmodRR8ACgkQbheoBegw
XLIvvg/+KZ0sAX0UpUdc9Sj9Siybzdu2LfgZukuZdy1J7k6UfvzDPqJyl3lXx/V2
SZE/9xqlU5s3WASUOfljSwxuLCDpYyIb3PKLuw9EO/iy0u9U4/ALDNt5KG4Z+OH8
iciajBlhK9AJRnsEDrxU459ILiUhIX43EsWk8KxMqsVo/60/o+mLmFOyzvBX0fwt
lGBzMZVFQ4uP2tgMHD7XCD1v9IWoPvaTz1KDGj2eFtZ+wt15rcbHISQQUt6fz9co
2Cdhud5OJ7poVInnm9fhkcp8lDL6LHQnncOxHV6JR2GdM6NB9oo2DnI8/F35Z/pS
GwgadRI75zENnM5U+JsYPPWo7gdtfINmWxbH++20Raeml0nJFWRoj4ODCmm0n36+
Ribfwh8tUFOUtRuE15sBLZRf7cbWCoq6ed/Z7gySXkpQWyHvABxwJP3N96PDxj3l
eg4adKbjXPl2Ii+BZQA5fCF1ALYtn9NPc97411w3ozgHfYHc+YsbR3ALZsfCmzWG
XJoL8SOT89pSS1exbbVS+icxx2DUytliYd1pEsUkgHAzex/pgpSR93/539ebrsEu
HT48Le+sLowlEeebGWWPx62AAykild2D5ltjf0zp+qBLJNyhyRriVhfjqhit23sk
K1J/Hn3QXBiucuSrpYfguoAM2mh5+cb4RplvqguEo8WwPy+ZgEI=
=bVgE
-----END PGP SIGNATURE-----