Branch sisyphus update bulletin.

Package yelp updated to version 42.3-alt1 for branch sisyphus in task 387002.

Published: 2024-12-25

BDU:2025-03944

Уязвимость справочной системы Yelp, связанная с включением функций из недостоверной контролируемой области при обработке документов с использованием схемы ghelp, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации и выполнить произвольный код

Severity: MEDIUM (6.5) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Severity: HIGH (7.8) Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

References:

CVE-2025-3155

Published: 2025-04-03
Modified: 2025-08-12

CVE-2025-3155

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Severity: HIGH (7.4) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

References:

Package yelp-xsl updated to version 42.4-alt1 for branch sisyphus in task 387002.

Published: 2024-12-25

BDU:2025-03944

Severity: MEDIUM (6.5) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Severity: HIGH (7.8) Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

References:

CVE-2025-3155

Published: 2025-04-03
Modified: 2025-08-12

CVE-2025-3155

Severity: HIGH (7.4) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

References:

Version: 2.1.2

Branch sisyphus update on 2025-06-14

ALT-BU-2025-8078-1

ALT-PU-2025-8069-1

Closed vulnerabilities

BDU:2025-03944

CVE-2025-3155

ALT-PU-2025-8071-1

Closed vulnerabilities

BDU:2025-03944

CVE-2025-3155