CLSA-2026-1791305273

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791305273.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791305273
Upstream
Published
2026-10-06T16:48:04Z
Modified
2026-10-26T09:32:04Z
Summary
Fix CVE(s): CVE-2025-3155
Details
  • SECURITY UPDATE: arbitrary script execution in help documents
    • debian/patches/CVE-2025-3155.patch: add a nonce-based CSP to the generated pages (data/xslt/*.xsl.in, libyelp/yelp-transform.c)
    • CVE-2025-3155
References

Affected packages

TuxCare:Ubuntu:18.04 / libyelp-dev

Package

Name
libyelp-dev
Purl
pkg:deb/tuxcare/libyelp-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-1ubuntu2+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791305273.json"

TuxCare:Ubuntu:18.04 / libyelp0

Package

Name
libyelp0
Purl
pkg:deb/tuxcare/libyelp0?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-1ubuntu2+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791305273.json"

TuxCare:Ubuntu:18.04 / yelp

Package

Name
yelp
Purl
pkg:deb/tuxcare/yelp?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-1ubuntu2+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791305273.json"