Description
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | yelp | < 42.2-8 | 42.2-8 |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | yelp | 42.2-3 | — |
| Debian 14 | yelp-xsl | 42.1-4 | — |
| Debian 13 | yelp | 42.2-3 | — |
| Debian 13 | yelp-xsl | 42.1-4 | — |
| Debian 12 | yelp | 42.2-1+deb12u1 | DSA-5927-1 |
| Debian 12 | yelp-xsl | 42.1-2+deb12u1 | DSA-5927-1 |
| Debian 11 | yelp +1 | 3.38.3-1+deb11u1 | DLA-4185-1, DLA-4184-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | yelp | 42.2-1ubuntu0.24.04.1 | USN-7447-1 |
| Ubuntu 24.04 LTS | yelp-xsl | 42.1-2ubuntu0.24.04.1 | USN-7447-1 |
| Ubuntu 22.04 LTS | yelp | 42.1-1ubuntu0.1 | USN-7447-1 |
| Ubuntu 22.04 LTS | yelp-xsl | 42.0-1ubuntu0.1 | USN-7447-1 |
| Ubuntu 20.04 LTS | yelp | 3.36.2-0ubuntu1.1 | USN-7447-1 |
| Ubuntu 20.04 LTS | yelp-xsl | 3.36.0-1ubuntu0.1 | USN-7447-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | yelp | 3.26.0-1ubuntu2+esm2 | USN-8756-1 |
| Ubuntu Pro 16.04 LTS | yelp | 3.18.1-1ubuntu4+esm2 | USN-8756-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | yelp +2 | 2:40.3-2.el9_6.1 | RHSA-2025:7430 |
| RHEL 8 | yelp +2 | 2:3.28.1-3.el8_10.1 | RHSA-2025:7569 |
| RHEL 8 | yelp-xsl | 3.28.0-2.el8_10.1 | RHSA-2025:7569 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | yelp +2 | 2:40.3-2.el9_4.1 | RHSA-2025:4456 |
| RHEL 9.2 EUS | yelp +2 | 2:40.3-2.el9_2.1 | RHSA-2025:4505 |
| RHEL 9.0 E4S | yelp +1 | 2:40.3-2.el9_0.1 | RHSA-2025:4450 |
| RHEL 8.8 EUS | yelp +2 | 2:3.28.1-3.el8_8.1 | RHSA-2025:4532 |
| RHEL 8.6 TUS | yelp +1 | 2:3.28.1-3.el8_6.1 | RHSA-2025:4455 |
| RHEL 8.6 E4S | yelp +1 | 2:3.28.1-3.el8_6.1 | RHSA-2025:4455 |
| RHEL 8.6 AUS | yelp +1 | 2:3.28.1-3.el8_6.1 | RHSA-2025:4455 |
| RHEL 8.4 TUS | yelp +1 | 2:3.28.1-3.el8_4.1 | RHSA-2025:4451 |
| RHEL 8.4 E4S | yelp +1 | 2:3.28.1-3.el8_4.1 | RHSA-2025:4451 |
| RHEL 8.4 AUS | yelp +1 | 2:3.28.1-3.el8_4.1 | RHSA-2025:4451 |
| RHEL 8.2 AUS | yelp +1 | 2:3.28.1-3.el8_2.1 | RHSA-2025:4457 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | yelp +2 | 2:40.3-2.el9_6.1 | ALSA-2025:7430 |
| AlmaLinux 8 | yelp +2 | 2:3.28.1-3.el8_10.1 | ALSA-2025:7569 |
| AlmaLinux 8 | yelp-xsl | 3.28.0-2.el8_10.1 | ALSA-2025:7569 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | yelp | 2:40.3-2.el9_6.1 | RLSA-2025:7430 |
| Rocky Linux 8 | yelp | 2:3.28.1-3.el8_10.1 | RLSA-2025:7569 |
| Rocky Linux 8 | yelp-xsl | 3.28.0-2.el8_10.1 | RLSA-2025:7569 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | yelp | 42.2-150600.3.3.1 | SUSE-SU-2025:02170-1 |
| SLES 15 SP7 | yelp-xsl | 41.1-150400.3.3.1 | SUSE-SU-2025:02168-1 |
| SLES 15 SP6 | yelp | 42.2-150600.3.3.1 | SUSE-SU-2025:02170-1 |
| SLES 15 SP6 | yelp-xsl | 41.1-150400.3.3.1 | SUSE-SU-2025:02168-1 |
| SLES 12 SP5 | yelp | 3.20.1-7.3.1 | SUSE-SU-2025:2169-1, SUSE-SU-2025:02169-1 |
| SLES 12 SP5 | yelp-xsl | 3.20.1-6.3.1 | SUSE-SU-2025:02153-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | yelp | 42.2-4.1 | openSUSE-SU-2025:15167-1 |
| openSUSE Tumbleweed | yelp-xsl | 42.1-2.1 | openSUSE-SU-2025:15168-1 |
| openSUSE Leap 15.6 | yelp | 42.2-150600.3.3.1 | SUSE-SU-2025:02170-1 |
| openSUSE Leap 15.6 | yelp-xsl | 41.1-150400.3.3.1 | SUSE-SU-2025:02168-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | yelp | 42.2-r5 | — |
| Alpine v3.24 | yelp-xsl | 42.1-r3 | — |
| Alpine v3.23 | yelp | 42.2-r5 | — |
| Alpine v3.23 | yelp-xsl | 42.1-r3 | — |
| Alpine v3.22 | yelp | 42.2-r5 | — |
| Alpine v3.22 | yelp-xsl | 42.1-r3 | — |
| Alpine v3.21 | yelp | 42.2-r4 | — |
| Alpine v3.21 | yelp-xsl | 42.1-r2 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | yelp +2 | 2:3.28.1-1.amzn2.0.1 | ALAS2-2025-2862 |
| Amazon Linux 2 | yelp-xsl +1 | 3.28.0-1.amzn2.0.1 | ALAS2-2025-2861 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | yelp +2 | 2:40.3-2.el9_6.1 | ELSA-2025-7430 |
| Oracle Linux 8 | yelp +2 | 2:3.28.1-3.el8_10.1 | ELSA-2025-7569 |
| Oracle Linux 8 | yelp-xsl | 3.28.0-2.el8_10.1 | ELSA-2025-7569 |
Advisories 30
- ALSA-2025:7430 Important: yelp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:7569 Important: yelp and yelp-xsl security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-8756-1 yelp vulnerability Ubuntu Security Notices (USN) · Sep 14, 2026
- WID-SEC-2025-0931 Red Hat Enterprise Linux (yelp): Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 14, 2026
- RHSA-2025:7569 Red Hat Security Advisory: yelp and yelp-xsl security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2025:7430 Red Hat Security Advisory: yelp security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2025:4532 Red Hat Security Advisory: yelp security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2025:4505 Red Hat Security Advisory: yelp security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2025:4457 Red Hat Security Advisory: yelp security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2025:4456 Red Hat Security Advisory: yelp security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2025:4451 Red Hat Security Advisory: yelp security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2025:4455 Red Hat Security Advisory: yelp security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2025:4450 Red Hat Security Advisory: yelp security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- USN-7447-1 yelp, yelp-xsl vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- openSUSE-SU-2025:15168-1 yelp-xsl-42.1-2.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15167-1 libyelp0-42.2-4.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:2169-1 Security update for yelp SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-5927-1 yelp - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-4185-1 yelp-xsl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-4184-1 yelp - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2025:02168-1 Security update for yelp-xsl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:02170-1 Security update for yelp SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:02153-1 Security update for yelp-xsl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:02169-1 Security update for yelp SUSE / openSUSE Security Updates · Feb 4, 2026
- RLSA-2025:7430 Important: yelp security update Rocky Linux Security Advisories · Oct 4, 2025
- RLSA-2025:7569 Important: yelp and yelp-xsl security update Rocky Linux Security Advisories · Jul 29, 2025
- ALAS2-2025-2861 Moderate: yelp-xsl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 29, 2025
- ALAS2-2025-2862 Moderate: yelp security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 29, 2025
- ELSA-2025-7430 Important: yelp security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 22, 2025
- ELSA-2025-7569 Important: yelp and yelp-xsl security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 15, 2025
References
- RHSA-2025:4450 vendor-advisory
- RHSA-2025:4451 vendor-advisory
- RHSA-2025:4455 vendor-advisory
- RHSA-2025:4456 vendor-advisory
- RHSA-2025:4457 vendor-advisory
- RHSA-2025:4505 vendor-advisory
- RHSA-2025:4532 vendor-advisory
- RHSA-2025:7430 vendor-advisory
- RHSA-2025:7569 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-3155 vdb-entry
- RHBZ#2357091 issue-tracking
- https://gitlab.gnome.org/GNOME/yelp/-/issues/221