yelp (42.2-1ubuntu0.24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: Sandbox escape
    - debian/patches/CVE-2026-13601-1.patch: Don't allow ghelp:/proc URIs in
      libyelp/yelp-uri.c.
    - debian/patches/CVE-2026-13601-2.patch: Don't allow loading external
      resources from web pages in libyelp/web-extension/yelp-web-extension.c.
    - CVE-2026-13601

 -- Isabel Garcia Contreras <isabel.garcia@canonical.com>  Wed, 22 Jul 2026 15:12:38 -0400

yelp (42.2-1ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: arbitrary script execution
    - debian/patches/CVE-2025-3155.patch: use a nonce in
      data/xslt/mal2html.xsl.in, data/xslt/man2html.xsl.in,
      data/xslt/yelp-common.xsl.in, libyelp/yelp-transform.c,
      libyelp/yelp-view.c.
    - CVE-2025-3155

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 17 Apr 2025 10:58:08 -0400

yelp (42.2-1build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 08:34:55 +0000

yelp (42.2-1build1) noble; urgency=medium

  * No-change rebuild against libglib2.0-0t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 08 Mar 2024 08:20:01 +0000

yelp (42.2-1) unstable; urgency=medium

  * New upstream release
  * debian/yelp.docs: README -> README.md
  * debian/control.in: Bump Standards-Version to 4.6.1

 -- Jeremy Bicha <jbicha@ubuntu.com>  Mon, 19 Sep 2022 10:48:14 -0400

yelp (42.1-2) unstable; urgency=medium

  * Build against webkit2gtk 4.1

 -- Jeremy Bicha <jbicha@ubuntu.com>  Wed, 01 Jun 2022 15:59:15 -0400

yelp (42.1-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <jbicha@ubuntu.com>  Mon, 28 Mar 2022 08:21:00 -0400

yelp (42.0-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <jbicha@ubuntu.com>  Mon, 21 Mar 2022 09:43:27 -0400

yelp (42~beta-2) unstable; urgency=medium

  * Release to unstable

 -- Jeremy Bicha <jeremy.bicha@canonical.com>  Mon, 14 Feb 2022 12:20:39 -0500

yelp (42~beta-1) experimental; urgency=medium

  * New upstream release
  * debian/yelp-dev.install: The gtk-doc docs are no longer installed
  * debian/control.in: Build-Depend on libhandy-1-dev

 -- Jeremy Bicha <jeremy.bicha@canonical.com>  Mon, 14 Feb 2022 09:49:40 -0500

yelp (41.2-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <jbicha@debian.org>  Sun, 05 Dec 2021 03:57:12 -0500

yelp (41.1-1) unstable; urgency=medium

  * New upstream release
  * Drop AppStream patch: applied in new release

 -- Jeremy Bicha <jbicha@debian.org>  Sat, 25 Sep 2021 18:54:28 -0400

yelp (41.0-2) unstable; urgency=medium

  * Cherry-pick patch to fix AppStream metadata validation

 -- Jeremy Bicha <jbicha@debian.org>  Mon, 20 Sep 2021 17:26:52 -0400

yelp (41.0-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <jbicha@debian.org>  Sat, 18 Sep 2021 18:37:12 -0400

yelp (41~beta2-2) unstable; urgency=medium

  * debian/control.in: Lower yelp-xsl dependency to 41~

 -- Jeremy Bicha <jbicha@debian.org>  Mon, 30 Aug 2021 22:41:46 -0400

yelp (41~beta2-1) unstable; urgency=medium

  * New upstream release
  * Drop appdata update patch: applied in new release
  * debian/rules: Build with webkit2gtk 2.32
  * debian/rules: Simplify a bit
  * debian/libyelp0.symbols: Update
  * Bump debhelper-compat to 13
  * Build-Depend on dh-sequence-gnome instead of gnome-pkg-tools
  * Bump minimum glib to 2.67.4 and yelp-xsl to 41

 -- Jeremy Bicha <jbicha@debian.org>  Mon, 30 Aug 2021 22:30:26 -0400

yelp (40.stable-1) experimental; urgency=medium

  * New upstream release, hacked version to be newer...

 -- Sebastien Bacher <seb128@ubuntu.com>  Tue, 23 Mar 2021 20:41:19 +0100

yelp (40.beta-1) experimental; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@ubuntu.com>  Wed, 24 Feb 2021 10:17:13 +0100

yelp (3.38.3-1) unstable; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@ubuntu.com>  Mon, 15 Feb 2021 11:37:06 +0100

yelp (3.38.2-1) unstable; urgency=medium

  * Team upload
  * New upstream release
  * d/upstream/metadata: Add
  * Add a Lintian override for gtk-doc documentation (see #970275)
  * Standards-Version: 4.5.1 (no changes required)
  * Set Rules-Requires-Root to no
  * d/tests: Add a superficial compile/link/run autopkgtest

 -- Simon McVittie <smcv@debian.org>  Mon, 30 Nov 2020 15:59:45 +0000

yelp (3.38.1-1) unstable; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@ubuntu.com>  Mon, 05 Oct 2020 10:29:30 +0200

yelp (3.38.0-1) unstable; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@ubuntu.com>  Tue, 15 Sep 2020 13:43:37 +0200

yelp (3.37.90-1) experimental; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@ubuntu.com>  Mon, 10 Aug 2020 12:38:37 +0200

yelp (3.36.0-1) unstable; urgency=medium

  * Upload to unstable

  [ Laurent Bigonville ]
  * debian/control.in: Make yelp recommends docbook-xml, (lib)yelp tries to
    load /etc/xml/catalog, if this file doesn't exist, it falls back to the
    yelp internal faux catalog. But the fact that /etc/xml/catalog exits
    doesn't mean that the needed docbookx dtd are installed.
  * New upstream release
  * Bump debhelper compatibility to 12
  * debian/control.in: Bump Standards-Version to 4.5.0 (no further changes)

  [ Ken VanDine ]
  * debian/patches/required-content_rating-and-releases-appdata.patch
    - Added tags required for validation, fixing FTBFS due to test failures

 -- Sebastien Bacher <seb128@ubuntu.com>  Tue, 07 Apr 2020 22:15:37 +0200

yelp (3.34.0-1) unstable; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@ubuntu.com>  Tue, 10 Sep 2019 11:16:28 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libyelp0`.
