[Git][security-tracker-team/security-tracker][master] lts: mark yelp sandbox escape issue as fixed in version 3.38.3-1+deb11u2
Daniel Leidert (@dleidert)
dleidert at debian.org
Thu Jun 25 00:37:04 BST 2026
Daniel Leidert pushed to branch master at Debian Security Tracker / security-tracker
Commits:
82569566 by Daniel Leidert at 2026-06-25T01:34:37+02:00
lts: mark yelp sandbox escape issue as fixed in version 3.38.3-1+deb11u2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -30245,6 +30245,7 @@ CVE-2026-XXXX [yelp: Sandbox escape]
- yelp 49.1-1 (bug #1136299)
[trixie] - yelp 42.2-4+deb13u1
[bookworm] - yelp 42.2-1+deb12u2
+ [bullseye] - yelp 3.38.3-1+deb11u2
NOTE: https://blogs.gnome.org/mcatanzaro/2026/05/11/flatpak-sandbox-escape-via-yelp/
NOTE: https://gitlab.gnome.org/GNOME/yelp/-/work_items/238
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/yelp/-/commit/d220aa2f754eed4e6a006a4acaa68b31892dea2b (49.1)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8256956610a2d7a813b6fa91a85fc78668256fdf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8256956610a2d7a813b6fa91a85fc78668256fdf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260624/ced436f0/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list