# CVE-2025-3155: libyelp0: A flaw was found in Yelp CVE-2025-3155 is fixed in 5 products on 1 platform, first by libyelp0 3.26.0-1ubuntu2+esm2, released April 3, 2025. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2025-3155 - Priority: High - CVSS: 7.4 (Medium) - EPSS: 0.1312 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Apr 3, 2025 ## Description A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libyelp0 Ubuntu 18.04.6 LTS (bionic) | 3.26.0-1ubuntu2+esm2 | [libyelp0 3.26.0-1ubuntu2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libyelp0-3.26.0-1ubuntu2-esm2.md) | Apr 3, 2025 | | Linux | libyelp0 Ubuntu 20.04 LTS (focal) | 3.36.2-0ubuntu1.1 | [libyelp0 3.36.2-0ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libyelp0-3.36.2-0ubuntu1.1.md) | Apr 3, 2025 | | Linux | libyelp0 Ubuntu 22.04.1 LTS (jammy) | 42.1-1ubuntu0.1 | [libyelp0 42.1-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libyelp0-42.1-1ubuntu0.1.md) | Apr 3, 2025 | | Linux | libyelp0 Ubuntu 24.04.5 LTS (noble) | 42.2-1ubuntu0.24.04.1 | [libyelp0 42.2-1ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libyelp0-42.2-1ubuntu0.24.04.1.md) | Apr 3, 2025 | | Linux | libyelp0 Ubuntu 24.10 (oracular) | 42.2-1ubuntu0.24.10.1 | [libyelp0 42.2-1ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libyelp0-42.2-1ubuntu0.24.10.1.md) | Jan 16, 2026 | | Linux | libyelp0 Ubuntu 25.04 (plucky) | 42.2-2ubuntu0.1 | [libyelp0 42.2-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libyelp0-42.2-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | yelp Debian 11.6 (bullseye) | 3.38.3-1+deb11u1 | [DLA-4184-1](https://patchblox.com/security/data/fix/linux/dla-4184-1.md) | May 28, 2025 | | Linux | yelp Debian 12.15 (bookworm) | 42.2-1+deb12u1 | [DSA-5927-1](https://patchblox.com/security/data/fix/linux/dsa-5927-1.md) | May 28, 2025 | | Linux | yelp Debian 13.5 (trixie) | 42.2-3 | [DEBIAN-CVE-2025-3155](https://patchblox.com/security/data/fix/linux/debian-cve-2025-3155.md) | Apr 3, 2025 | | Linux | yelp Debian 14 | 42.2-3 | [DEBIAN-CVE-2025-3155](https://patchblox.com/security/data/fix/linux/debian-cve-2025-3155.md) | Apr 3, 2025 | | Linux | yelp RHEL 8 | 2:3.28.1-3.el8_10.1 | [RHSA-2025:7569](https://patchblox.com/security/data/fix/linux/rhsa-2025-7569.md) | May 14, 2025 | | Linux | yelp RHEL 9 | 2:40.3-2.el9_6.1 | [RHSA-2025:7430](https://patchblox.com/security/data/fix/linux/rhsa-2025-7430.md) | May 13, 2025 | | Linux | yelp Ubuntu 18.04.6 LTS (bionic) | 3.26.0-1ubuntu2+esm2 | [yelp 3.26.0-1ubuntu2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-yelp-3.26.0-1ubuntu2-esm2.md) | Apr 3, 2025 | | Linux | yelp Ubuntu 20.04 LTS (focal) | 3.36.2-0ubuntu1.1 | [yelp 3.36.2-0ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-yelp-3.36.2-0ubuntu1.1.md) | Apr 3, 2025 | | Linux | yelp Ubuntu 22.04.1 LTS (jammy) | 42.1-1ubuntu0.1 | [yelp 42.1-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-yelp-42.1-1ubuntu0.1.md) | Apr 3, 2025 | | Linux | yelp Ubuntu 24.04.5 LTS (noble) | 42.2-1ubuntu0.24.04.1 | [yelp 42.2-1ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-yelp-42.2-1ubuntu0.24.04.1.md) | Apr 3, 2025 | | Linux | yelp Ubuntu 24.10 (oracular) | 42.2-1ubuntu0.24.10.1 | [yelp 42.2-1ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-yelp-42.2-1ubuntu0.24.10.1.md) | Jan 16, 2026 | | Linux | yelp Ubuntu 25.04 (plucky) | 42.2-2ubuntu0.1 | [yelp 42.2-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-yelp-42.2-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | yelp almalinux 8 | 2:3.28.1-3.el8_10.1 | [ALSA-2025:7569](https://patchblox.com/security/data/fix/linux/alsa-2025-7569.md) | May 14, 2025 | | Linux | yelp almalinux 9 | 2:40.3-2.el9_6.1 | [ALSA-2025:7430](https://patchblox.com/security/data/fix/linux/alsa-2025-7430.md) | May 13, 2025 | | Linux | yelp ol 8 | 2:3.28.1-3.el8_10.1 | [ELSA-2025-7569](https://patchblox.com/security/data/fix/linux/elsa-2025-7569.md) | May 15, 2025 | | Linux | yelp ol 9 | 2:40.3-2.el9_6.1 | [ELSA-2025-7430](https://patchblox.com/security/data/fix/linux/elsa-2025-7430.md) | May 22, 2025 | | Linux | yelp opensuse-leap 15.6 | 42.2-150600.3.3.1 | [SUSE-SU-2025:02170-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02170-1.md) | Jun 30, 2025 | | Linux | yelp rocky 8 | 2:3.28.1-3.el8_10.1 | [RLSA-2025:7569](https://patchblox.com/security/data/fix/linux/rlsa-2025-7569.md) | Jul 29, 2025 | | Linux | yelp rocky 9 | 2:40.3-2.el9_6.1 | [RLSA-2025:7430](https://patchblox.com/security/data/fix/linux/rlsa-2025-7430.md) | Oct 4, 2025 | | Linux | yelp sles 15.6 | 42.2-150600.3.3.1 | [SUSE-SU-2025:02170-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02170-1.md) | Jun 30, 2025 | | Linux | yelp sles 15.7 | 42.2-150600.3.3.1 | [SUSE-SU-2025:02170-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02170-1.md) | Jun 30, 2025 | | Linux | yelp-devel RHEL 8 | 2:3.28.1-3.el8_10.1 | [RHSA-2025:7569](https://patchblox.com/security/data/fix/linux/rhsa-2025-7569.md) | May 14, 2025 | | Linux | yelp-devel RHEL 9 | 2:40.3-2.el9_6.1 | [RHSA-2025:7430](https://patchblox.com/security/data/fix/linux/rhsa-2025-7430.md) | May 13, 2025 | | Linux | yelp-devel almalinux 8 | 2:3.28.1-3.el8_10.1 | [ALSA-2025:7569](https://patchblox.com/security/data/fix/linux/alsa-2025-7569.md) | May 14, 2025 | | Linux | yelp-devel almalinux 9 | 2:40.3-2.el9_6.1 | [ALSA-2025:7430](https://patchblox.com/security/data/fix/linux/alsa-2025-7430.md) | May 13, 2025 | | Linux | yelp-devel ol 8 | 2:3.28.1-3.el8_10.1 | [ELSA-2025-7569](https://patchblox.com/security/data/fix/linux/elsa-2025-7569.md) | May 15, 2025 | | Linux | yelp-devel ol 9 | 2:40.3-2.el9_6.1 | [ELSA-2025-7430](https://patchblox.com/security/data/fix/linux/elsa-2025-7430.md) | May 22, 2025 | | Linux | yelp-libs RHEL 8 | 2:3.28.1-3.el8_10.1 | [RHSA-2025:7569](https://patchblox.com/security/data/fix/linux/rhsa-2025-7569.md) | May 14, 2025 | | Linux | yelp-libs RHEL 9 | 2:40.3-2.el9_6.1 | [RHSA-2025:7430](https://patchblox.com/security/data/fix/linux/rhsa-2025-7430.md) | May 13, 2025 | | Linux | yelp-libs almalinux 8 | 2:3.28.1-3.el8_10.1 | [ALSA-2025:7569](https://patchblox.com/security/data/fix/linux/alsa-2025-7569.md) | May 14, 2025 | | Linux | yelp-libs almalinux 9 | 2:40.3-2.el9_6.1 | [ALSA-2025:7430](https://patchblox.com/security/data/fix/linux/alsa-2025-7430.md) | May 13, 2025 | | Linux | yelp-libs ol 8 | 2:3.28.1-3.el8_10.1 | [ELSA-2025-7569](https://patchblox.com/security/data/fix/linux/elsa-2025-7569.md) | May 15, 2025 | | Linux | yelp-libs ol 9 | 2:40.3-2.el9_6.1 | [ELSA-2025-7430](https://patchblox.com/security/data/fix/linux/elsa-2025-7430.md) | May 22, 2025 | | Linux | yelp-xsl Debian 11.6 (bullseye) | 3.38.3-1+deb11u1 | [DLA-4185-1](https://patchblox.com/security/data/fix/linux/dla-4185-1.md) | May 28, 2025 | | Linux | yelp-xsl Debian 12.15 (bookworm) | 42.1-2+deb12u1 | [DSA-5927-1](https://patchblox.com/security/data/fix/linux/dsa-5927-1.md) | May 28, 2025 | | Linux | yelp-xsl Debian 13.5 (trixie) | 42.1-4 | [DEBIAN-CVE-2025-3155](https://patchblox.com/security/data/fix/linux/debian-cve-2025-3155.md) | Apr 3, 2025 | | Linux | yelp-xsl Debian 14 | 42.1-4 | [DEBIAN-CVE-2025-3155](https://patchblox.com/security/data/fix/linux/debian-cve-2025-3155.md) | Apr 3, 2025 | | Linux | yelp-xsl RHEL 8 | 0:3.28.0-2.el8_10.1 | [RHSA-2025:7569](https://patchblox.com/security/data/fix/linux/rhsa-2025-7569.md) | May 14, 2025 | | Linux | yelp-xsl almalinux 8 | 3.28.0-2.el8_10.1 | [ALSA-2025:7569](https://patchblox.com/security/data/fix/linux/alsa-2025-7569.md) | May 14, 2025 | | Linux | yelp-xsl ol 8 | 0:3.28.0-2.el8_10.1 | [ELSA-2025-7569](https://patchblox.com/security/data/fix/linux/elsa-2025-7569.md) | May 15, 2025 | | Linux | yelp-xsl opensuse-leap 15.6 | 41.1-150400.3.3.1 | [SUSE-SU-2025:02168-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02168-1.md) | Jun 30, 2025 | | Linux | yelp-xsl rocky 8 | 0:3.28.0-2.el8_10.1 | [RLSA-2025:7569](https://patchblox.com/security/data/fix/linux/rlsa-2025-7569.md) | Jul 29, 2025 | | Linux | yelp-xsl sles 15.6 | 41.1-150400.3.3.1 | [SUSE-SU-2025:02168-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02168-1.md) | Jun 30, 2025 | | Linux | yelp-xsl sles 15.7 | 41.1-150400.3.3.1 | [SUSE-SU-2025:02168-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02168-1.md) | Jun 30, 2025 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.