-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 23 May 2025 20:09:22 -0300 Source: yelp Binary: libyelp-dev libyelp0 libyelp0-dbgsym yelp yelp-dbgsym Architecture: armel Version: 42.2-1+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Lucas Kanashiro Description: libyelp-dev - Library for the GNOME help browser (development) libyelp0 - Library for the GNOME help browser yelp - Help browser for GNOME Changes: yelp (42.2-1+deb12u1) bookworm-security; urgency=medium . * Non-maintainer upload by the Security Team. * Fix CVE-2025-3155. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. - d/p/CVE-2025-3155.patch Checksums-Sha1: f11b0c93ec610f9bc2a39222fbcdc00d83beb24e 75080 libyelp-dev_42.2-1+deb12u1_armel.deb dac749f55f96502ada55af82e5d4ac89f8bf4501 327696 libyelp0-dbgsym_42.2-1+deb12u1_armel.deb 14ce67b4bd907db788685a5cf9d91ff7d1bc851e 143544 libyelp0_42.2-1+deb12u1_armel.deb 89d19828137a58f111f461c97014d0f9ce526908 64868 yelp-dbgsym_42.2-1+deb12u1_armel.deb bdb6c96ea0b4eee73e94227e5f945203cf2bd723 20635 yelp_42.2-1+deb12u1_armel-buildd.buildinfo 0dcf8a4b871750577a455a01f50c4fad9701258b 776784 yelp_42.2-1+deb12u1_armel.deb Checksums-Sha256: ca6fd026edb3b52cc0997e01096a29afb20e0119bb1f94850057bd60239f0922 75080 libyelp-dev_42.2-1+deb12u1_armel.deb 0aa451912e168a7a49b7c4438e278acb97e6050764d08316f9a7a4273d46a068 327696 libyelp0-dbgsym_42.2-1+deb12u1_armel.deb 6b50c6fb25ca7494cd36779efaffb046a33cab5e9fc52c8c6272cdb9e84dbe01 143544 libyelp0_42.2-1+deb12u1_armel.deb 63ba04745a14040c7599d786b0a042aff3620c6e6f4ec8d01b481e15ef8e2412 64868 yelp-dbgsym_42.2-1+deb12u1_armel.deb 730353a74c577d642fbe8a5d7eb851c24cdc5a4e3ee41593b6dd7c5542d57ae5 20635 yelp_42.2-1+deb12u1_armel-buildd.buildinfo d8a00c5ddea551292770d1de0e09f7b56b3ff0cd50e68f91bdd5aed3ce698a82 776784 yelp_42.2-1+deb12u1_armel.deb Files: 0225cc64f05a8d527aa184992214ae8c 75080 libdevel optional libyelp-dev_42.2-1+deb12u1_armel.deb b7baa68d4a7b819d2ed2f1c4e8dbe52c 327696 debug optional libyelp0-dbgsym_42.2-1+deb12u1_armel.deb 9d20857498a6b398bd659f74fbf2dc4d 143544 libs optional libyelp0_42.2-1+deb12u1_armel.deb 6e6b2bd3b71b1c5a80f28e2bb9ab3b88 64868 debug optional yelp-dbgsym_42.2-1+deb12u1_armel.deb 20818202d5d82238477ae170cea84d14 20635 gnome optional yelp_42.2-1+deb12u1_armel-buildd.buildinfo 5a541511eae63ffa6f65dd03a5d2fbe7 776784 gnome optional yelp_42.2-1+deb12u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKAzExpjGvTI78ZO8LARVyvnD3xkFAmg0vvYACgkQLARVyvnD 3xlw4w/+JKrsb1rXQmlr7uIVv/yR5emGW02pInLW6SH2BfmCvtz34dNFYcNBecrp dImujH1dW3kB5ZxVKwtdGmtknfI9WOJOweGf9eQfKOFBeL7LS8ekYnsez0Hye9Ob yZz87aVhP1of02y6pyW5NjEw7TE5wlMUSPM0IaF7QVd3FWdfKlYZM8d1hMsZx5Hm FXD5o4Bv0W4W1q+Gv9hfXyboZb079/GEVR5DWW6wIFZyNlS3l2lLpSpdlHSgqydn 5N0uD2b3gpvX1aEaPocYNWN8e9hMVGKyvaj1ziaJrYVerZJPQGBE4UwqldlfkKEM Ded1zeD5FZGZ06A3V9WIGIilnsvfS/kVgaqgyeNpt8OOISMXyIEaYNtwuKeTlesu 96mFjuGEOwpXu6TjBURlzughgmGTomSaeKcFVPoil7WZXFpRHZlY/y+5QWcWMnzP a7UymkRu2kceFC7rmEeaXUTHmJzlp8STOxzTnZxDuKsnBGcfI/PZls9Ani9SxYiu iZW9pK+PFZiEMNPXz+l6uFVQVh6fAZObOnpZxk6rOIWw1RCpHc3nsh4TuMhtMa1e IRMwWYU5ToUQ/2xs8LC7QRxKfE5+Thp1H6+tZayoTtDYWfr7kKeXBQ2C23rPdZx2 Kg+AP5k7p7o1pmbywVWkoOBjrhZJShjYTkiIiq9s3AYIJUDRfEU= =AqZQ -----END PGP SIGNATURE-----