-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 23:30:00 +0000 Source: yelp Architecture: source Version: 42.2-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: Debian GNOME Maintainers <[email protected]> Changed-By: Aron Malache <[email protected]> Closes: 1136299 Changes: yelp (42.2-1+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * SECURITY UPDATE: sandbox escape via ghelp: URIs and external resources loaded by help pages, allowing a malicious help document to read arbitrary files (e.g. via /proc) and exfiltrate them over the network (Closes: #1136299). Checksums-Sha1: 3fd52428a767a8e978df5cd7b27ba9db413b5cb2 2135 yelp_42.2-1+deb12u2.dsc a42a021667352b31a230e1b47b4b4566a43e5953 19560 yelp_42.2-1+deb12u2.debian.tar.xz 78ee77e9526c8847d9fa856d9cb44d5a914ecfae 7347 yelp_42.2-1+deb12u2_source.buildinfo Checksums-Sha256: 41aca16ce9c3ecb9cd24419dd9ed23aba87e5994398a7fc44fd24a119084f0ba 2135 yelp_42.2-1+deb12u2.dsc ecd450cebece67043088163f17205fc9c23145c701b705533535076ee89ff001 19560 yelp_42.2-1+deb12u2.debian.tar.xz 1bee1115a850fb1a06443253f3e4d14f74491626cc5664aaa3fde9d980ef5fc9 7347 yelp_42.2-1+deb12u2_source.buildinfo Files: 8836bcf03922f976cd08e0ed27ffba32 2135 gnome optional yelp_42.2-1+deb12u2.dsc c48044c1bb213fc808aff94467bf9d30 19560 gnome optional yelp_42.2-1+deb12u2.debian.tar.xz 59061abeca464600a7860e78db388324 7347 gnome optional yelp_42.2-1+deb12u2_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmodPuYACgkQ+GQ1dHE8 m66TXwf+NcwScSm2t6l+qwE7SgIBZWiQFX9NXcuH/BxEPq8cxFvntDMvf6AdNVRQ ghgGsZvDCLoFkbjt1RLSuGnZhyfiO1pVMVnbF3r+9az0uJisykcy1b5V49cCgVg7 +bI5e5ugSa1siAkz/3HbuC4P+ruyoEKG9fZgzKFOy2uFLNJRzTcdw2Fk9ZXfWXrb ky3yJGAkCKMqDIFvKZvNUuXiPUuyEK1fMLMfuwI1EyTAhNmn/w2kecBo5vCaxcRh W0n+hjbOhfaC5ozzyf+oiKIin9m3Ik71+blO4rvp6or2XR+bRjD6nEQ6bIBoUx+y znHZ4Y9v/amalK8vivXvzoxmn85yTw== =rnQ8 -----END PGP SIGNATURE-----
pgpYa7S5dXjBL.pgp
Description: PGP signature
