Summary
[2:3.28.1-3.2]
- Fix CVE-2026-13601 (RHEL-190226)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | yelp | 2:3.28.1-3.el8_10.2 |
| Oracle Linux · 8 | yelp-devel | 2:3.28.1-3.el8_10.2 |
| Oracle Linux · 8 | yelp-libs | 2:3.28.1-3.el8_10.2 |
Vulnerabilities 1
-
High 7.1
Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications
A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a…