[CLSA-2026:1791305273] Fix CVE(s): CVE-2025-3155
Type:
security
Severity:
Important
Release date:
2026-10-06 16:48:04 UTC
Description:
* SECURITY UPDATE: arbitrary script execution in help documents - debian/patches/CVE-2025-3155.patch: add a nonce-based CSP to the generated pages (data/xslt/*.xsl.in, libyelp/yelp-transform.c) - CVE-2025-3155
CVEs fixed:
Updated packages:
  • libyelp-dev_3.26.0-1ubuntu2+tuxcare.els1_amd64.deb
    sha:403b620c25e502c2ca064b5c55d57cb29756625d
  • libyelp0_3.26.0-1ubuntu2+tuxcare.els1_amd64.deb
    sha:17c9b36edb55dfa0066fe19ec72225740a8ad07a
  • yelp_3.26.0-1ubuntu2+tuxcare.els1_amd64.deb
    sha:467c89959195b9902540cb1db7425b42ee975f74
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.