CVE-2025-3155: Debian Linux

High severity, CVSS 7.4. EPSS: 13.1% chance of exploitation in the next 30 days.

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Affected products

  • Debian Debian Linux: version 11.0 only
  • Gnome Yelp: version 42.2-8 only
  • Red Hat Codeready Linux Builder: version 8.0 only; version 9.0 only
  • Red Hat Codeready Linux Builder For ARM64: version 8.0_aarch64 only; version 9.0_aarch64 only
  • Red Hat Codeready Linux Builder For ARM64 Eus: version 8.8_aarch64 only; version 9.2_aarch64 only; version 9.4_aarch64 only; version 9.6_aarch64 only
  • Red Hat Codeready Linux Builder For Eus: version 8.8 only; version 9.2 only; version 9.4 only
  • Red Hat Codeready Linux Builder For IBM Z Systems: version 8.0_s390x only; version 9.0_s390x only
  • Red Hat Codeready Linux Builder For IBM Z Systems Eus: version 8.8_s390x only; version 9.2_s390x only; version 9.4_s390x only; version 9.6_s390x only
  • Red Hat Codeready Linux Builder For Power Little Endian: version 8.0_ppc64le only; version 9.0_ppc64le only
  • Red Hat Codeready Linux Builder For Power Little Endian Eus: version 8.8_ppc64le only; version 9.2_ppc64le only; version 9.4_ppc64le only; version 9.6_ppc64le only
  • Red Hat Enterprise Linux: version 8.0 only; version 9.0 only
  • Red Hat Enterprise Linux Eus: version 9.2 only; version 9.4 only; version 9.6 only
  • Red Hat Enterprise Linux For Arm 64: version 8.0 only; version 8.8_aarch64 only; version 9.0_aarch64 only; version 9.2_aarch64 only
  • Red Hat Enterprise Linux For Arm 64 Eus: version 9.4_aarch64 only; version 9.6_aarch64 only
  • Red Hat Enterprise Linux For IBM Z Systems: version 8.0_s390x only; version 9.0_s390x only
  • Red Hat Enterprise Linux For IBM Z Systems Eus: version 8.8_s390x only; version 9.2_s390x only; version 9.4_s390x only; version 9.6_s390x only
  • Red Hat Enterprise Linux For Power Little Endian: version 8.0_ppc64le only; version 9.0_ppc64le only
  • Red Hat Enterprise Linux For Power Little Endian Eus: version 8.8_ppc64le only; version 9.2_ppc64le only; version 9.4_ppc64le only; version 9.6_ppc64le only
  • Red Hat Enterprise Linux Server Aus: version 8.2 only; version 8.4 only; version 8.6 only; version 9.2 only; version 9.4 only; version 9.6 only
  • Red Hat Enterprise Linux Server Tus: version 8.4 only; version 8.6 only; version 8.8 only
  • Red Hat Enterprise Linux Update Services For SAP Solutions: version 8.4 only; version 8.6 only; version 8.8 only; version 9.0 only; version 9.2 only; version 9.4 only

Published 2025-04-03. Last modified 2026-06-29.