-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 23 May 2025 20:09:22 -0300 Source: yelp Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym Architecture: armhf Version: 42.2-1+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Lucas Kanashiro Description: libyelp-dev - Library for the GNOME help browser (development) libyelp0 - Library for the GNOME help browser yelp - Help browser for GNOME Changes: yelp (42.2-1+deb12u1) bookworm-security; urgency=medium . * Non-maintainer upload by the Security Team. * Fix CVE-2025-3155. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. - d/p/CVE-2025-3155.patch Checksums-Sha1: 4b16750a16025f5a49769f05a42874eb003311a2 75084 libyelp-dev_42.2-1+deb12u1_armhf.deb 1fcd2d57c4f6e3baedb3f58df9ee1eac10026b3d 329952 libyelp0-dbgsym_42.2-1+deb12u1_armhf.deb bbc7677d9d1bd40e2220220e53e0053b91f346de 144196 libyelp0_42.2-1+deb12u1_armhf.deb 6df20079ec90f6822c47369a0edc851b74f8a724 63720 yelp-dbgsym_42.2-1+deb12u1_armhf.deb 08d0b3c5c8393f2e4584ebd80ed0898e3c1d42c2 20738 yelp_42.2-1+deb12u1_armhf-buildd.buildinfo be5389a7f3000ba93558062ef508fbb2014d03e3 776920 yelp_42.2-1+deb12u1_armhf.deb Checksums-Sha256: f09f49ce374b747c9afcf160633542200b6c6caf099251ebf8b555c4698bc9a5 75084 libyelp-dev_42.2-1+deb12u1_armhf.deb 59d5f368047ba5e9cb852611eef3adbb41c0f1cad309d0cc785236d7cb140fe2 329952 libyelp0-dbgsym_42.2-1+deb12u1_armhf.deb b07cf72717aaee3e2dacc9bde0b29da0f42c0b7b63f169c126261caeaa0903c5 144196 libyelp0_42.2-1+deb12u1_armhf.deb cef2590b0a26c0f4a2bc10fa6e38d02566a41326b434d555ad4c03b9356696aa 63720 yelp-dbgsym_42.2-1+deb12u1_armhf.deb 7a7ee312d102a79f429dc1b898419f3ee20213af26ad95e530550fc3a973caf8 20738 yelp_42.2-1+deb12u1_armhf-buildd.buildinfo 7ee8c5f58c292785fc977ee27c67085450907e0a84f230dd94e3ee541955be78 776920 yelp_42.2-1+deb12u1_armhf.deb Files: 7db6d49edce827185b0f5c6287a89ce2 75084 libdevel optional libyelp-dev_42.2-1+deb12u1_armhf.deb 010d9dbc91f2583f06eebc35862d2344 329952 debug optional libyelp0-dbgsym_42.2-1+deb12u1_armhf.deb ca4dc6ce6e76444bee635c26e5fdfef0 144196 libs optional libyelp0_42.2-1+deb12u1_armhf.deb a35b8dc2cdc91d845358bfcc329fe25f 63720 debug optional yelp-dbgsym_42.2-1+deb12u1_armhf.deb dc1b72cfce68bd1b5f5aedc7acb41e62 20738 gnome optional yelp_42.2-1+deb12u1_armhf-buildd.buildinfo 4a2d7cbf24024955b43caf147699bda0 776920 gnome optional yelp_42.2-1+deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvEwFZ4bqkVI+Rh6t+N4VxR6LZYEFAmg0vvAACgkQ+N4VxR6L ZYGGCA/+Ow3EIKo0vIuUxuyGGIyC8oPZnQw9bbfP8sSAMkYdIUiZXTiDtFacz819 Gh+Gh7OjUiFd+fMX6Y9Pvq7KuQYZeBg0s+mYl2N3yCO2qYl/wqUetEdMz4cOtryy V7Qsd30bTSTKNqAGmeCT6Wu750JRwsP6ZZcTJlBzgHiYu/gOpJwTH/sz7AIZAmQm 54hM6kwvyOzHeFf5ZGdn2CvtjFjMO6dBHsO+SPunYY8W/pTf6EiXhpXDS8JnjdXk enFjY+xIPjvW8A0h7RtvbMZxgW07i/QpmbAE1fs6jR5pDuhf5Y+ggiU/ltzedq3p yLKd4neZly8IjeU9pqEtA9yeoLF1iDimywqjgJIOuP6QHiSir6UQtJxpjgS4aQb+ F6hQfCKUP5RmX+7dRqYXxW3HWDM/UCLud8O50aselewgPYlfgIbGyrOVMEASoEPh BRg4XF17IzJ4NbsuwEqoOxmWMEe0pKzDZjo7qaKsXu+Gf+AcMrU0a1scOULKtOxm 5t5MtezDPHdu82z+cHtteOm2ISbCqdHhQKR6VdCEOuj5iVnkZ4x9XYbLthMr28A4 asL8c6sg/JuafnlxOBVZAvvvEYT3lhgIlmYRSxFeb3k+ZvhprBsBHhUPlIfLNMPY zsMPoyVghIlJGxOTOzAzJY8SMG1l6/09CpDkb76Mltl6PIN/NDc= =BuoT -----END PGP SIGNATURE-----