-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 23 May 2025 20:18:19 -0300 Source: yelp-xsl Binary: yelp-xsl Architecture: all Version: 42.1-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Lucas Kanashiro Description: yelp-xsl - XSL stylesheets for the yelp help browser Changes: yelp-xsl (42.1-2+deb12u1) bookworm-security; urgency=medium . * Non-maintainer upload by the Security Team. * Fix CVE-2025-3155. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. - d/p/CVE-2025-3155.patch Checksums-Sha1: 7ed50527d8cc59bf1a310c0a8179d52545b880de 6926 yelp-xsl_42.1-2+deb12u1_all-buildd.buildinfo 36b5fa06a363f4fda183bafee9bdd049266275fd 467624 yelp-xsl_42.1-2+deb12u1_all.deb Checksums-Sha256: f787e75bbf0bcb7d829c2f590c4a3b69435972c6734d16868d540d505bc3edc7 6926 yelp-xsl_42.1-2+deb12u1_all-buildd.buildinfo edf094be5631291fcacb560900ad4b9393fb301921c197de1f95e4363dbfbb5a 467624 yelp-xsl_42.1-2+deb12u1_all.deb Files: 1a0be07e638d33765bcf875d52a7db8b 6926 gnome optional yelp-xsl_42.1-2+deb12u1_all-buildd.buildinfo dcdbd84ce1362aca1ec1f4803895183f 467624 gnome optional yelp-xsl_42.1-2+deb12u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmg0vlIACgkQJm69HxMT N+ozpw//Wq6rgX2PIHMmAZFNvRv3w+d9TkUexvZiHJgjL33Sd/7H6qzblPdib8Ej yFxREgdB+9fRelZwM5QgexJw118/StlVre/klZHvIpKDh1yuifZpswBYRMb88evd owiyHgtoSzmMhy49WpTjDVcwNjwJ88OXByN/1M9wyOViMuEgo+zYxwIe73HQxYa8 AFtzihk+1/mSSrXJuT6BtDNh+jDbzryTSd7qgB9QJdKnwRaJsPvJmTMxWZHmm3So Zggyj22qDS4DyxMHUcfuTOFHgQ5BZABpqigPXjVBv+3hg6IaIG2fXaRoZcUC0WFC J2iEAvFM4RDZ/ZZ53mqYxz93i9O077VwlLc/TSAu0fR5ftKHumQ+mkEvPIxdGMSr Vm2uJghNNAC/lgVfit6Zlrdeer2XqIRhF+ySiRDNznGV+11fhwn5oz2zhHfHLjW7 v3DGYnpGcq22gyO2zUSnwMEzY7U8pz5FBIVB4g7Ik+fqaoMlbJR83Uv7n4GHViB/ i8PLGXOeJo9n/2P2IwiiEzyqpYcDHruMxD8cVW8VMz7aj0XcHUJdEAl99O/37uU+ /sNcpHtKpVZECqrjJOQc3oR8SYd7Ne2uiAyU3CXvXwk2MJ7iSWLJhoonYPD/Qf+9 eKqx1ERfltF4MLfOt52J6285BZwt1wDI07JTpNNi9MmNbeHZC+c= =vmCA -----END PGP SIGNATURE-----