Gnome help app have a critical security vulnerability

frankjunior · April 20, 2025, 4:44pm

Should fedora remove yelp app from fedora default installation with a update for all for now untill unless the issue resolves.

gist.github.com

https://gist.github.com/parrot409/e970b155358d45b298d7024edd9b17f2

writeup.md

## Details

### Intro

CVE-2025-3155 affects Yelp which is The Gnome's user help application. It's installed by default on Ubuntu desktop.

### what is a scheme

A URI scheme is the part of a Uniform Resource Identifier (URI) that identifies a protocol or a specific application (`steam://run/1337`) that should handle the resource identified by the URI. It's the part that comes before the colon (`://`).

This file has been truncated. show original

ilikelinux · April 20, 2025, 6:08pm

There is already a ticket open within bugzilla:

Topic		Replies	Views
Gnome vulnerability The Water Cooler tech-talk	1	298	October 10, 2023
Your experience with GNOME Software in Silverblue Project Discussion silverblue-team	54	8657	November 3, 2022
Fedora Silverblue: Modifying gnome session requires modifying /usr Ask Fedora gnome , silverblue	2	396	March 10, 2023
GNOME Software broken after upgrading from Silverbue 35 to 36 Project Discussion silverblue-team	6	1592	September 10, 2022
Setting up Fedora Silverblue with some KDE Apps Ask Fedora kde , flatpak , gnome , kinoite , silverblue	6	1074	January 19, 2024

Gnome help app have a critical security vulnerability

Related topics