Every CVE Search/ Get API key

CVE-2025-3155

Yelp: arbitrary file read

7.4 HighFix available

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

13.1%Up 13.1 points since Apr 4, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.4

Yelp: arbitrary file read

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Record
CVE-2025-3155
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Weakness
CWE-601
Updated
2026-11-04
EUVDEUVD-2025-9635 7.4

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Record
EUVD-2025-9635
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-04
GitHub AdvisoriesGHSA-h7mx-548v-cr9r 6.5

A flaw was found in Yelp. The Gnome user help application allows the help document to execute...

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Record
GHSA-h7mx-548v-cr9r
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-601, CWE-829
Updated
2026-11-02
NVD 7.4

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Record
CVE-2025-3155
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Weakness
CWE-601
Updated
2026-11-04
OSVALPINE-CVE-2025-3155 7.4

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Record
ALPINE-CVE-2025-3155
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-03
OSV 7.4

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Record
CVE-2025-3155
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
Show 34 moreShow less
OSVDEBIAN-CVE-2025-3155 7.4

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Record
DEBIAN-CVE-2025-3155
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-05
OSVOESA-2025-1535 7.4

yelp security update

Yelp is the help viewer in GNOME. It natively views Mallard, DocBook, man, info, and HTML documents. It can locate documents according to the freedesktop.org help system specification.

Security Fix(es):

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.(CVE-2025-3155)

Record
OESA-2025-1535
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1543 7.4

yelp-xsl security update

This package contains XSL stylesheets that are used by the yelp help browser.

Security Fix(es):

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.(CVE-2025-3155)

Record
OESA-2025-1543
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1606 7.4

yelp security update

Yelp is the help viewer in GNOME. It natively views Mallard, DocBook, man, info, and HTML documents. It can locate documents according to the freedesktop.org help system specification.

Security Fix(es):

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.(CVE-2025-3155)

Record
OESA-2025-1606
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1607 7.4

yelp security update

Yelp is the help viewer in GNOME. It natively views Mallard, DocBook, man, info, and HTML documents. It can locate documents according to the freedesktop.org help system specification.

Security Fix(es):

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.(CVE-2025-3155)

Record
OESA-2025-1607
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1608 7.4

yelp security update

Yelp is the help viewer in GNOME. It natively views Mallard, DocBook, man, info, and HTML documents. It can locate documents according to the freedesktop.org help system specification.

Security Fix(es):

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.(CVE-2025-3155)

Record
OESA-2025-1608
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1609 7.4

yelp security update

Yelp is the help viewer in GNOME. It natively views Mallard, DocBook, man, info, and HTML documents. It can locate documents according to the freedesktop.org help system specification.

Security Fix(es):

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.(CVE-2025-3155)

Record
OESA-2025-1609
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:4450 7.4

Red Hat Security Advisory: yelp security update

Record
RHSA-2025:4450
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:4451 7.4

Red Hat Security Advisory: yelp security update

Record
RHSA-2025:4451
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:4455 7.4

Red Hat Security Advisory: yelp security update

Record
RHSA-2025:4455
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:4456 7.4

Red Hat Security Advisory: yelp security update

Record
RHSA-2025:4456
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:4457 7.4

Red Hat Security Advisory: yelp security update

Record
RHSA-2025:4457
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:4505 7.4

Red Hat Security Advisory: yelp security update

Record
RHSA-2025:4505
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:4532 7.4

Red Hat Security Advisory: yelp security update

Record
RHSA-2025:4532
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:7430 7.4

Red Hat Security Advisory: yelp security update

Record
RHSA-2025:7430
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:7569 7.4

Red Hat Security Advisory: yelp and yelp-xsl security update

Record
RHSA-2025:7569
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2025:7430 7.4

Important: yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

  • yelp: Arbitrary file read (CVE-2025-3155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:7430
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2025:7569 7.4

Important: yelp and yelp-xsl security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

  • yelp: Arbitrary file read (CVE-2025-3155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:7569
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-3155 7.4

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Record
UBUNTU-CVE-2025-3155
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2025:7430 No score

Important: yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

  • yelp: Arbitrary file read (CVE-2025-3155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:7430
Updated
2026-11-02
OSVALSA-2025:7569 No score

Important: yelp and yelp-xsl security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

  • yelp: Arbitrary file read (CVE-2025-3155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:7569
Updated
2026-11-02
OSVCLSA-2025-1750782430 No score

yelp: Fix of CVE-2025-3155

  • CVE-2025-3155: fix execution of arbitrary scripts in help documents, preventing malicious file exfiltration
Record
CLSA-2025-1750782430
Updated
2026-11-02
OSVCLSA-2026-1791305273 No score

Fix CVE(s): CVE-2025-3155

  • SECURITY UPDATE: arbitrary script execution in help documents
    • debian/patches/CVE-2025-3155.patch: add a nonce-based CSP to the generated pages (data/xslt/*.xsl.in, libyelp/yelp-transform.c)
    • CVE-2025-3155
Record
CLSA-2026-1791305273
Updated
2026-11-02
OSVMGASA-2025-0297 No score

Updated yelp & yelp-xsl packages fix security vulnerability

The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. (CVE-2025-3155)

Record
MGASA-2025-0297
Updated
2026-11-02
OSVopenSUSE-SU-2025:15167-1 No score

libyelp0-42.2-4.1 on GA media

These are all security issues fixed in the libyelp0-42.2-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15167-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15168-1 No score

yelp-xsl-42.1-2.1 on GA media

These are all security issues fixed in the yelp-xsl-42.1-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15168-1
Updated
2026-11-02
OSVSUSE-SU-2025:01904-1 No score

Security update for yelp

This update for yelp fixes the following issues:

  • CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
Record
SUSE-SU-2025:01904-1
Updated
2026-11-02
OSVSUSE-SU-2025:02153-1 No score

Security update for yelp-xsl

This update for yelp-xsl fixes the following issues:

  • CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
Record
SUSE-SU-2025:02153-1
Updated
2026-11-02
OSVSUSE-SU-2025:02168-1 No score

Security update for yelp-xsl

This update for yelp-xsl fixes the following issues:

  • CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
Record
SUSE-SU-2025:02168-1
Updated
2026-11-02
OSVSUSE-SU-2025:02169-1 No score

Security update for yelp

This update for yelp fixes the following issues:

  • CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
Record
SUSE-SU-2025:02169-1
Updated
2026-11-02
OSVSUSE-SU-2025:02170-1 No score

Security update for yelp

This update for yelp fixes the following issues:

  • CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
Record
SUSE-SU-2025:02170-1
Updated
2026-11-02
OSVSUSE-SU-2025:2169-1 No score

Security update for yelp

This update for yelp fixes the following issues:

  • CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
Record
SUSE-SU-2025:2169-1
Updated
2026-11-02
OSVUSN-7447-1 No score

yelp, yelp-xsl vulnerability

It was discovered that Yelp incorrectly handled paths in ghelp URLs. A remote attacker could use this issue to trick users into opening malicious downloaded help files and exfiltrate sensitive information.

Record
USN-7447-1
Updated
2026-11-02
OSVUSN-8756-1 No score

yelp vulnerability

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information.

Record
USN-8756-1
Updated
2026-11-02

Affected products

Show 24 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
yelp
Alpine:v3.21
 before 42.2-r4
42.2-r4
yelp
Alpine:v3.22
 before 42.2-r5
42.2-r5
yelp
Alpine:v3.23
 before 42.2-r5
42.2-r5
yelp
Alpine:v3.24
 before 42.2-r5
42.2-r5
yelp-xsl
Alpine:v3.21
 before 42.1-r2
42.1-r2
yelp-xsl
Alpine:v3.22
 before 42.1-r3
42.1-r3
yelp-xsl
Alpine:v3.23
 before 42.1-r3
42.1-r3
yelp-xsl
Alpine:v3.24
 before 42.1-r3
42.1-r3
yelp
AlmaLinux:9
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-devel
AlmaLinux:9
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
Show 139 moreShow less
Affected packages
PackageAffectedFixed
yelp-libs
AlmaLinux:9
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp
AlmaLinux:8
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-devel
AlmaLinux:8
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-libs
AlmaLinux:8
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-xsl
AlmaLinux:8
 before 3.28.0-2.el8_10.1
3.28.0-2.el8_10.1
yelp
TuxCare:AlmaLinux:9.2
 before 2:40.3-2.el9.tuxcare.els1
2:40.3-2.el9.tuxcare.els1
yelp-devel
TuxCare:AlmaLinux:9.2
 before 2:40.3-2.el9.tuxcare.els1
2:40.3-2.el9.tuxcare.els1
yelp-libs
TuxCare:AlmaLinux:9.2
 before 2:40.3-2.el9.tuxcare.els1
2:40.3-2.el9.tuxcare.els1
libyelp-dev
TuxCare:Ubuntu:18.04
 before 3.26.0-1ubuntu2+tuxcare.els1
3.26.0-1ubuntu2+tuxcare.els1
libyelp0
TuxCare:Ubuntu:18.04
 before 3.26.0-1ubuntu2+tuxcare.els1
3.26.0-1ubuntu2+tuxcare.els1
yelp
TuxCare:Ubuntu:18.04
 before 3.26.0-1ubuntu2+tuxcare.els1
3.26.0-1ubuntu2+tuxcare.els1
yelp
Debian:12
 before 42.2-1+deb12u1, plus listed versions
42.2-1
42.2-1+deb12u1
yelp
Debian:13
 before 42.2-3
42.2-3
yelp
Debian:14
 before 42.2-3
42.2-3
yelp-xsl
Debian:12
 before 42.1-2+deb12u1, plus listed versions
42.1-2
42.1-2+deb12u1
yelp-xsl
Debian:13
 before 42.1-4
42.1-4
yelp-xsl
Debian:14
 before 42.1-4
42.1-4
yelp
Debian:11
 before 3.38.3-1+deb11u1, plus listed versions
3.38.3-1
3.38.3-1+deb11u1
yelp-xsl
Debian:11
 before 3.38.3-1+deb11u1, plus listed versions
3.38.3-1
3.38.3-1+deb11u1
yelp
Mageia:9
 before 42.2-1.1.mga9
42.2-1.1.mga9
yelp-xsl
Mageia:9
 before 42.1-1.1.mga9
42.1-1.1.mga9
yelp
openEuler:24.03-LTS-SP1
 before 42.2-3.oe2403sp1
42.2-3.oe2403sp1
yelp-xsl
openEuler:20.03-LTS-SP4
 before 3.36.0-2.oe2003sp4
3.36.0-2.oe2003sp4
yelp-xsl
openEuler:22.03-LTS-SP3
 before 3.38.3-2.oe2203sp3
3.38.3-2.oe2203sp3
yelp-xsl
openEuler:22.03-LTS-SP4
 before 3.38.3-2.oe2203sp4
3.38.3-2.oe2203sp4
yelp-xsl
openEuler:24.03-LTS
 before 42.1-2.oe2403sp1
42.1-2.oe2403sp1
yelp-xsl
openEuler:24.03-LTS-SP1
 before 42.1-2.oe2403sp1
42.1-2.oe2403sp1
yelp
openEuler:22.03-LTS-SP4
 before 3.38.3-2.oe2203sp4
3.38.3-2.oe2203sp4
yelp
openEuler:24.03-LTS
 before 42.2-3.oe2403
42.2-3.oe2403
yelp
openEuler:20.03-LTS-SP4
 before 3.36.0-2.oe2003sp4
3.36.0-2.oe2003sp4
yelp
openEuler:22.03-LTS-SP3
 before 3.38.3-2.oe2203sp3
3.38.3-2.oe2203sp3
yelp
Red Hat:rhel_e4s:9.0::appstream
 before 2:40.3-2.el9_0.1
2:40.3-2.el9_0.1
yelp-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 2:40.3-2.el9_0.1
2:40.3-2.el9_0.1
yelp-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 2:40.3-2.el9_0.1
2:40.3-2.el9_0.1
yelp-libs
Red Hat:rhel_e4s:9.0::appstream
 before 2:40.3-2.el9_0.1
2:40.3-2.el9_0.1
yelp-libs-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 2:40.3-2.el9_0.1
2:40.3-2.el9_0.1
yelp
Red Hat:rhel_aus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-libs
Red Hat:rhel_aus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-libs-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp
Red Hat:rhel_e4s:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-debugsource
Red Hat:rhel_e4s:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-libs
Red Hat:rhel_e4s:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-libs-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp
Red Hat:rhel_tus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-debugsource
Red Hat:rhel_tus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-libs
Red Hat:rhel_tus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp-libs-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 2:3.28.1-3.el8_4.1
2:3.28.1-3.el8_4.1
yelp
Red Hat:rhel_aus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-libs
Red Hat:rhel_aus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-libs-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp
Red Hat:rhel_e4s:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-libs
Red Hat:rhel_e4s:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-libs-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp
Red Hat:rhel_tus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-libs
Red Hat:rhel_tus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp-libs-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 2:3.28.1-3.el8_6.1
2:3.28.1-3.el8_6.1
yelp
Red Hat:rhel_eus:9.4::appstream
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp-libs
Red Hat:rhel_eus:9.4::appstream
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp-libs-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp-debugsource
Red Hat:rhel_eus:9.4::crb
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp-devel
Red Hat:rhel_eus:9.4::crb
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp-libs-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 2:40.3-2.el9_4.1
2:40.3-2.el9_4.1
yelp
Red Hat:rhel_aus:8.2::appstream
 before 2:3.28.1-3.el8_2.1
2:3.28.1-3.el8_2.1
yelp-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 2:3.28.1-3.el8_2.1
2:3.28.1-3.el8_2.1
yelp-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 2:3.28.1-3.el8_2.1
2:3.28.1-3.el8_2.1
yelp-libs
Red Hat:rhel_aus:8.2::appstream
 before 2:3.28.1-3.el8_2.1
2:3.28.1-3.el8_2.1
yelp-libs-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 2:3.28.1-3.el8_2.1
2:3.28.1-3.el8_2.1
yelp
Red Hat:rhel_eus:9.2::appstream
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp-debugsource
Red Hat:rhel_eus:9.2::appstream
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp-libs
Red Hat:rhel_eus:9.2::appstream
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp-libs-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp-debuginfo
Red Hat:rhel_eus:9.2::crb
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp-debugsource
Red Hat:rhel_eus:9.2::crb
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp-devel
Red Hat:rhel_eus:9.2::crb
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp-libs-debuginfo
Red Hat:rhel_eus:9.2::crb
 before 2:40.3-2.el9_2.1
2:40.3-2.el9_2.1
yelp
Red Hat:rhel_eus:8.8::appstream
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp-debugsource
Red Hat:rhel_eus:8.8::appstream
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp-libs
Red Hat:rhel_eus:8.8::appstream
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp-libs-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp-debuginfo
Red Hat:rhel_eus:8.8::crb
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp-debugsource
Red Hat:rhel_eus:8.8::crb
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp-devel
Red Hat:rhel_eus:8.8::crb
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp-libs-debuginfo
Red Hat:rhel_eus:8.8::crb
 before 2:3.28.1-3.el8_8.1
2:3.28.1-3.el8_8.1
yelp
Red Hat:enterprise_linux:9::appstream
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-debugsource
Red Hat:enterprise_linux:9::appstream
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-libs
Red Hat:enterprise_linux:9::appstream
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-debuginfo
Red Hat:enterprise_linux:9::crb
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-debugsource
Red Hat:enterprise_linux:9::crb
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-devel
Red Hat:enterprise_linux:9::crb
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp-libs-debuginfo
Red Hat:enterprise_linux:9::crb
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp
Red Hat:enterprise_linux:8::appstream
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-debugsource
Red Hat:enterprise_linux:8::appstream
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-libs
Red Hat:enterprise_linux:8::appstream
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-xsl
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.0-2.el8_10.1
0:3.28.0-2.el8_10.1
yelp-debuginfo
Red Hat:enterprise_linux:8::crb
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-debugsource
Red Hat:enterprise_linux:8::crb
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-devel
Red Hat:enterprise_linux:8::crb
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-libs-debuginfo
Red Hat:enterprise_linux:8::crb
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp
Rocky Linux:9
 before 2:40.3-2.el9_6.1
2:40.3-2.el9_6.1
yelp
Rocky Linux:8
 before 2:3.28.1-3.el8_10.1
2:3.28.1-3.el8_10.1
yelp-xsl
Rocky Linux:8
 before 0:3.28.0-2.el8_10.1
0:3.28.0-2.el8_10.1
yelp-xsl
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 3.20.1-6.3.1
3.20.1-6.3.1
yelp-xsl
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
 before 41.1-150400.3.3.1
41.1-150400.3.3.1
yelp-xsl
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
 before 41.1-150400.3.3.1
41.1-150400.3.3.1
yelp-xsl
openSUSE:Leap 15.6
 before 41.1-150400.3.3.1
41.1-150400.3.3.1
yelp
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 3.20.1-7.3.1
3.20.1-7.3.1
yelp
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
 before 42.2-150600.3.3.1
42.2-150600.3.3.1
yelp
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
 before 42.2-150600.3.3.1
42.2-150600.3.3.1
yelp
openSUSE:Leap 15.6
 before 42.2-150600.3.3.1
42.2-150600.3.3.1
yelp
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 3.20.1-7.3.1
3.20.1-7.3.1
yelp
Ubuntu:Pro:16.04:LTS
 before 3.18.1-1ubuntu4+esm2, plus listed versions
3.16.1-1ubuntu13.16.1-1ubuntu23.18.1-1ubuntu23.18.1-1ubuntu33.18.1-1ubuntu43.18.1-1ubuntu4+esm1
3.18.1-1ubuntu4+esm2
yelp
Ubuntu:Pro:18.04:LTS
 before 3.26.0-1ubuntu2+esm2, plus listed versions
3.26.0-1ubuntu13.26.0-1ubuntu23.26.0-1ubuntu2+esm1
3.26.0-1ubuntu2+esm2
yelp
Ubuntu:20.04:LTS
 before 3.36.2-0ubuntu1.1, plus listed versions
3.34.0-13.36.0-13.36.2-0ubuntu1
3.36.2-0ubuntu1.1
yelp
Ubuntu:22.04:LTS
 before 42.1-1ubuntu0.1, plus listed versions
40.stable-1build141.1-141.2-142~beta-242.0-142.1-1
42.1-1ubuntu0.1
yelp
Ubuntu:24.04:LTS
 before 42.2-1ubuntu0.24.04.1, plus listed versions
42.2-142.2-1build142.2-1build2
42.2-1ubuntu0.24.04.1
yelp-xsl
Ubuntu:20.04:LTS
 before 3.36.0-1ubuntu0.1, plus listed versions
3.34.0-13.34.2-13.36.0-1
3.36.0-1ubuntu0.1
yelp-xsl
Ubuntu:22.04:LTS
 before 42.0-1ubuntu0.1, plus listed versions
40.2-241.0-141.1-142~beta-142.0-1
42.0-1ubuntu0.1
yelp-xsl
Ubuntu:24.04:LTS
 before 42.1-2ubuntu0.24.04.1, plus listed versions
42.1-2
42.1-2ubuntu0.24.04.1
yelp
openSUSE:Tumbleweed
 before 42.2-4.1
42.2-4.1
yelp-xsl
openSUSE:Tumbleweed
 before 42.1-2.1
42.1-2.1

History

History
RecordedChangedSources
factsEUVD
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-3155 is a high vulnerability (CVSS 7.4) in Gnome Yelp, published April 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.1%, the 96th percentile. Fixed in yelp 42.2-r4.

References

Show 56 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open