[From nobody Tue Jun 2 19:49:04 2026 Received: (at 1136299-close) by bugs.debian.org; 2 Jun 2026 18:47:20 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 62; hammy, 150; neutral, 142; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:59274) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wUU92-00AgTJ-0A for 1136299-close@bugs.debian.org; Tue, 02 Jun 2026 18:47:20 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wUU90-004Jb5-0W for 1136299-close@bugs.debian.org; Tue, 02 Jun 2026 18:47:18 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=v3eslBSMPP4Y/Aa6kPqDqIHJIu9tDuC0NU3KvE/Z71w=; b=k3w4nInQmO0DY5sGdBFnmIqC2a mMagaolJYhZR9FyQmZCh7Z1Gtghxhj94fNtwf4iOX1t8wbgs8o+QP53q1bqC/lz79K0lrdUA496Ek /mbzCpxmOpp4Q+cy5I2UOufa2XPIjvLQ09dDYz00ggGCcvGKZVvcfBlp97IL4iw+RUHDOudNV+zJ/ 3GgyByMmjycpjFIEg0lOHFm51co2G2zahLEP4w9JuGuC5kKBWIEkwkA2yOf1u0jFEpAOGZRnt+ST1 6MUf1nDSXLhoSPZUO/nEQVMdwbR8x9fC85xznrVt5xXIdJTmzLiiZLWwYkXAqdV+Ux0hKl+QWHgUZ RdurRwhw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wUU8z-00000005wiF-00D4; Tue, 02 Jun 2026 18:47:17 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Aron Xu <aron@debian.org> To: 1136299-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: yelp Debian: DAK Debian-Changes: yelp_42.2-4+deb13u1_source.changes Debian-Source: yelp Debian-Version: 42.2-4+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1136299: fixed in yelp 42.2-4+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7998322092842515630==" Message-Id: <E1wUU8z-00000005wiF-00D4@fasolo.debian.org> Date: Tue, 02 Jun 2026 18:47:17 +0000 --===============7998322092842515630== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: yelp Source-Version: 42.2-4+deb13u1 Done: Aron Xu <aron@debian.org> We believe that the bug you reported is fixed in the latest version of yelp, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136299@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Aron Xu <aron@debian.org> (supplier of updated yelp package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 23:30:00 +0000 Source: yelp Architecture: source Version: 42.2-4+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Aron Xu <aron@debian.org> Closes: 1136299 Changes: yelp (42.2-4+deb13u1) trixie-security; urgency=3Dhigh . * Non-maintainer upload by the Security Team. * sandbox escape via ghelp: URIs loaded by help pages, allowing a malicious help document to read arbitrary files (e.g. via /proc) and exfiltrate them over the network (Closes: #1136299). Checksums-Sha1: 3d8b15bca2ee5cd4dc95b45b826a03c772240a80 2132 yelp_42.2-4+deb13u1.dsc de1d6d374bfd34b2519f1722f0887831ce176b1a 1480504 yelp_42.2.orig.tar.xz fcd0ab436bf54ecf6b0e6dc225c5ca690b61e7d6 19404 yelp_42.2-4+deb13u1.debian.ta= r.xz ac1049945ea9761415fd0750448c53098e2a18f5 7347 yelp_42.2-4+deb13u1_source.bui= ldinfo Checksums-Sha256: 8bc4ecaeba075e5a97b713eb2525aee0318b69043e7df8ad4aaed8b31bc32475 2132 yelp_4= 2.2-4+deb13u1.dsc b29e9512766bcd684bdc650457e4ecc99b236935c2c16d2acd4f7dd2cfc87a2e 1480504 yel= p_42.2.orig.tar.xz f0ed9a7da47e822daef2f3f7ff410aeeb399398036fb7069d93c6d6973f30881 19404 yelp_= 42.2-4+deb13u1.debian.tar.xz ecdf25bd228df21d59a9dda2650b9a8e65921f8c533da45c855f17ba8fb08a29 7347 yelp_4= 2.2-4+deb13u1_source.buildinfo Files: bc2096e1dab542e0a4bab82db19c464a 2132 gnome optional yelp_42.2-4+deb13u1.dsc 520c1e430279df7a7100164a80791280 1480504 gnome optional yelp_42.2.orig.tar.xz cdcf4d137b35c7ca02330e4edd051dbc 19404 gnome optional yelp_42.2-4+deb13u1.de= bian.tar.xz baa2ce6da2ff6fa707fcf5f7e380e164 7347 gnome optional yelp_42.2-4+deb13u1_sou= rce.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmodPwQACgkQ+GQ1dHE8 m652gQgA5R00CnyxgQG1zgUKqXLXvOoxTLTDQpDrgzzuRLgwM0C4zc/4lXaogmqV daZq4msoUumQGAgLdsStTCLhozCsOYaXfP4MB6Ox7h1pBAFJ8F73RjGTB0cHedd9 E5zvVDA1zc6ive5o2oVp3x5Ay7bNXr05RxkCKuF6UjyT5vKT0OQGEzIL4lA0ADQE /Wmt1CqmkV/PB8aIEzpaPov0aQ9HPhayJPZsWWpcQlcXeBs0WFujPuY+j9U6MFz8 IjBo+A1TwYYRfw/kDyYijYEsX8KaOVdir+gud1NPXYZaFZii2RLMsNvn/vjiQEsy x02SlfK0V5cLx2qKdl0ONXKlfZHLoA=3D=3D =3DsI7O -----END PGP SIGNATURE----- --===============7998322092842515630== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCah8lNAAKCRCb9qggYcy5 IXOQAP9aAIjPOVqyi4GH5Yu4pghT00hAeDm9EnJBMFvXkeUu3wD/fmoDGPf1kJMZ fJFRqDGs8lYuP8D2tahMQYv7B4fiHgo= =FMbU -----END PGP SIGNATURE----- --===============7998322092842515630==-- ]