Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Mageia: yelp Important Remote Code Exec CVE-2025-3155 Advisory 2025-0297

mageia
Calendar Grey November 15, 2025
Dist Mageia Esm H88
Updated yelp & yelp-xsl packages address important security flaw allowing arbitrary script execution.
MGASA-2025-0297 - Updated yelp & yelp-xsl packages fix security vulnerability

Summary

Description: The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. (CVE-2025-3155)

References

- https://bugs.mageia.org/show_bug.cgi?id=34173

- https://www.openwall.com/lists/oss-security/2025/04/04/1

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27Z5WA2SKQGJ4UVVHUNWY73Y4PNKT3AA/

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNBXVCRWOMV4OCPACFVW6R4I6T4PSAEM/

-

- https://www.cve.org/CVERecord?id=CVE-2025-3155

Topics%20covered

Topics Covered

security advisory remote code execution important malicious input Mageia user help

Resolution

SRPMS

- 9/core/yelp-42.2-1.1.mga9

- 9/core/yelp-xsl-42.1-1.1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 15 Nov 2025
URL: https://advisories.mageia.org/MGASA-2025-0297.html
Type: security
CVE: CVE-2025-3155

Topics%20covered

Topics Covered

security advisory remote code execution important malicious input Mageia user help

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here