Red Hat Product Errata RHSA-2025:4455 - Security Advisory
Issued:
2025-05-05
Updated:
2025-05-05

RHSA-2025:4455 - Security Advisory

Synopsis

Important: yelp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for yelp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

  • yelp: Arbitrary file read (CVE-2025-3155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6 s390x

Fixes

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
yelp-3.28.1-3.el8_6.1.src.rpm SHA-256: fbf9569d3c6e3e2c8dea264b87ab830f1f8aa7d078dcd237a23845ddfb54360e
x86_64
yelp-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 1a3acd6a857ae8ed6518d29ac7465c0fda531342334b9261260518881dfdaccd
yelp-debuginfo-3.28.1-3.el8_6.1.i686.rpm SHA-256: f4eaac2f7f9b587ed1f6c83c00ed096a28eb009d36d11869b0ff25b6082d7aca
yelp-debuginfo-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: a1931953a6978c23f0387fd25d40e5ef9f5b3cc0f5a95f7ebcc5375948ef4aac
yelp-debugsource-3.28.1-3.el8_6.1.i686.rpm SHA-256: 84a15e58cf99cda72215881701948332c05b496785fc6e1b9a734b9673d20eca
yelp-debugsource-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: ab38b70aae81804e6c85b7a50f6afd2ac7355ab50de613bc5868a5af2e4a1e11
yelp-libs-3.28.1-3.el8_6.1.i686.rpm SHA-256: 75f3a09ab72bd5e4267fff64912fba3dd44e420a591a94f176658128c0216977
yelp-libs-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 0a55f0f825f048c7082ad484c8154d3c60b1f03dc5aea0d6ce7c5314a411389b
yelp-libs-debuginfo-3.28.1-3.el8_6.1.i686.rpm SHA-256: 7e47b800aa508d932ea245340df645c6bc291cc94f49bfc5e7318fa845f399dc
yelp-libs-debuginfo-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 93143c9a1e1b7bfbc8258d53817265b6e09f17c76e147fec919ee291e37ad175

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
yelp-3.28.1-3.el8_6.1.src.rpm SHA-256: fbf9569d3c6e3e2c8dea264b87ab830f1f8aa7d078dcd237a23845ddfb54360e
x86_64
yelp-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 1a3acd6a857ae8ed6518d29ac7465c0fda531342334b9261260518881dfdaccd
yelp-debuginfo-3.28.1-3.el8_6.1.i686.rpm SHA-256: f4eaac2f7f9b587ed1f6c83c00ed096a28eb009d36d11869b0ff25b6082d7aca
yelp-debuginfo-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: a1931953a6978c23f0387fd25d40e5ef9f5b3cc0f5a95f7ebcc5375948ef4aac
yelp-debugsource-3.28.1-3.el8_6.1.i686.rpm SHA-256: 84a15e58cf99cda72215881701948332c05b496785fc6e1b9a734b9673d20eca
yelp-debugsource-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: ab38b70aae81804e6c85b7a50f6afd2ac7355ab50de613bc5868a5af2e4a1e11
yelp-libs-3.28.1-3.el8_6.1.i686.rpm SHA-256: 75f3a09ab72bd5e4267fff64912fba3dd44e420a591a94f176658128c0216977
yelp-libs-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 0a55f0f825f048c7082ad484c8154d3c60b1f03dc5aea0d6ce7c5314a411389b
yelp-libs-debuginfo-3.28.1-3.el8_6.1.i686.rpm SHA-256: 7e47b800aa508d932ea245340df645c6bc291cc94f49bfc5e7318fa845f399dc
yelp-libs-debuginfo-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 93143c9a1e1b7bfbc8258d53817265b6e09f17c76e147fec919ee291e37ad175

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
yelp-3.28.1-3.el8_6.1.src.rpm SHA-256: fbf9569d3c6e3e2c8dea264b87ab830f1f8aa7d078dcd237a23845ddfb54360e
x86_64
yelp-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 1a3acd6a857ae8ed6518d29ac7465c0fda531342334b9261260518881dfdaccd
yelp-debuginfo-3.28.1-3.el8_6.1.i686.rpm SHA-256: f4eaac2f7f9b587ed1f6c83c00ed096a28eb009d36d11869b0ff25b6082d7aca
yelp-debuginfo-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: a1931953a6978c23f0387fd25d40e5ef9f5b3cc0f5a95f7ebcc5375948ef4aac
yelp-debugsource-3.28.1-3.el8_6.1.i686.rpm SHA-256: 84a15e58cf99cda72215881701948332c05b496785fc6e1b9a734b9673d20eca
yelp-debugsource-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: ab38b70aae81804e6c85b7a50f6afd2ac7355ab50de613bc5868a5af2e4a1e11
yelp-libs-3.28.1-3.el8_6.1.i686.rpm SHA-256: 75f3a09ab72bd5e4267fff64912fba3dd44e420a591a94f176658128c0216977
yelp-libs-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 0a55f0f825f048c7082ad484c8154d3c60b1f03dc5aea0d6ce7c5314a411389b
yelp-libs-debuginfo-3.28.1-3.el8_6.1.i686.rpm SHA-256: 7e47b800aa508d932ea245340df645c6bc291cc94f49bfc5e7318fa845f399dc
yelp-libs-debuginfo-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 93143c9a1e1b7bfbc8258d53817265b6e09f17c76e147fec919ee291e37ad175

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
yelp-3.28.1-3.el8_6.1.src.rpm SHA-256: fbf9569d3c6e3e2c8dea264b87ab830f1f8aa7d078dcd237a23845ddfb54360e
ppc64le
yelp-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: ef9881a30ba6893f8a9a1c97e0a798ba8ac107ce8eaf6cd684795f7194f8b2bf
yelp-debuginfo-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: a749a53e4d9bee4f53f7ee7198d6007d2f3479dd037f7da062c343d68fb9e074
yelp-debugsource-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: d5e3a5f8f48720999dfd0ecd3751b02d502536428b45389452fb6760d1aa4422
yelp-libs-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: 26dd36c55acffff69775250391e651d0d1bf6eec61742f4afa293de5a1d6bf0b
yelp-libs-debuginfo-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: e8abe25af4fa6d197c458ca61e9f82f8a6e815ef26ee6c524c4e32c447534627

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
yelp-3.28.1-3.el8_6.1.src.rpm SHA-256: fbf9569d3c6e3e2c8dea264b87ab830f1f8aa7d078dcd237a23845ddfb54360e
x86_64
yelp-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 1a3acd6a857ae8ed6518d29ac7465c0fda531342334b9261260518881dfdaccd
yelp-debuginfo-3.28.1-3.el8_6.1.i686.rpm SHA-256: f4eaac2f7f9b587ed1f6c83c00ed096a28eb009d36d11869b0ff25b6082d7aca
yelp-debuginfo-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: a1931953a6978c23f0387fd25d40e5ef9f5b3cc0f5a95f7ebcc5375948ef4aac
yelp-debugsource-3.28.1-3.el8_6.1.i686.rpm SHA-256: 84a15e58cf99cda72215881701948332c05b496785fc6e1b9a734b9673d20eca
yelp-debugsource-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: ab38b70aae81804e6c85b7a50f6afd2ac7355ab50de613bc5868a5af2e4a1e11
yelp-libs-3.28.1-3.el8_6.1.i686.rpm SHA-256: 75f3a09ab72bd5e4267fff64912fba3dd44e420a591a94f176658128c0216977
yelp-libs-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 0a55f0f825f048c7082ad484c8154d3c60b1f03dc5aea0d6ce7c5314a411389b
yelp-libs-debuginfo-3.28.1-3.el8_6.1.i686.rpm SHA-256: 7e47b800aa508d932ea245340df645c6bc291cc94f49bfc5e7318fa845f399dc
yelp-libs-debuginfo-3.28.1-3.el8_6.1.x86_64.rpm SHA-256: 93143c9a1e1b7bfbc8258d53817265b6e09f17c76e147fec919ee291e37ad175

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6

SRPM
yelp-3.28.1-3.el8_6.1.src.rpm SHA-256: fbf9569d3c6e3e2c8dea264b87ab830f1f8aa7d078dcd237a23845ddfb54360e
aarch64
yelp-3.28.1-3.el8_6.1.aarch64.rpm SHA-256: 3c580ed48a0de56d73139f72c6c41b94a70dbd259987df0c2270b5f051c934f2
yelp-debuginfo-3.28.1-3.el8_6.1.aarch64.rpm SHA-256: a7b9e63ecb252977f038a7fb29dfefd8ab1abb75f743e43840645d442d884e69
yelp-debugsource-3.28.1-3.el8_6.1.aarch64.rpm SHA-256: 72ead6a5ca84caa2e8db3525dde767f2143ae9d3ffcb3b754812316881b26ac9
yelp-libs-3.28.1-3.el8_6.1.aarch64.rpm SHA-256: a8576d8fb0c219bd04d1d26e01540d07e1477c6e2dbd1e282b2253bf75cb70c7
yelp-libs-debuginfo-3.28.1-3.el8_6.1.aarch64.rpm SHA-256: 20de429a817ef08249859228b9dbb254d753b6bcc0a177f033a75f2b622d96ed

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6

SRPM
yelp-3.28.1-3.el8_6.1.src.rpm SHA-256: fbf9569d3c6e3e2c8dea264b87ab830f1f8aa7d078dcd237a23845ddfb54360e
ppc64le
yelp-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: ef9881a30ba6893f8a9a1c97e0a798ba8ac107ce8eaf6cd684795f7194f8b2bf
yelp-debuginfo-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: a749a53e4d9bee4f53f7ee7198d6007d2f3479dd037f7da062c343d68fb9e074
yelp-debugsource-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: d5e3a5f8f48720999dfd0ecd3751b02d502536428b45389452fb6760d1aa4422
yelp-libs-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: 26dd36c55acffff69775250391e651d0d1bf6eec61742f4afa293de5a1d6bf0b
yelp-libs-debuginfo-3.28.1-3.el8_6.1.ppc64le.rpm SHA-256: e8abe25af4fa6d197c458ca61e9f82f8a6e815ef26ee6c524c4e32c447534627

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6

SRPM
yelp-3.28.1-3.el8_6.1.src.rpm SHA-256: fbf9569d3c6e3e2c8dea264b87ab830f1f8aa7d078dcd237a23845ddfb54360e
s390x
yelp-3.28.1-3.el8_6.1.s390x.rpm SHA-256: bfc31106dc1500fa01c88bf77e8f954c8b4afab1e9fc63e71f6da6a6f8fab617
yelp-debuginfo-3.28.1-3.el8_6.1.s390x.rpm SHA-256: 397c5954cc90eabfd9c438dc436ea2ddd7c90920328f7d4d06cda1a529481afe
yelp-debugsource-3.28.1-3.el8_6.1.s390x.rpm SHA-256: 970495e41a23fdf6d7ed058a17bfa80b2a15760fa70119b7bbb6bc9b65022974
yelp-libs-3.28.1-3.el8_6.1.s390x.rpm SHA-256: 612be3bf87ae0e6f43757b4a96a713ab6c20d6da34b643e1fd62c401e90dbc08
yelp-libs-debuginfo-3.28.1-3.el8_6.1.s390x.rpm SHA-256: cd11f2ab1f54517af48746e7d8a35efd9c3966e7e6b7fa5ea276a092ea9f464f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.