Summary
[2:40.3-3.1]
- Fix CVE-2026-13601 (RHEL-190224)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | yelp | 2:40.3-3.el9_8.1 |
| Oracle Linux · 9 | yelp-devel | 2:40.3-3.el9_8.1 |
| Oracle Linux · 9 | yelp-libs | 2:40.3-3.el9_8.1 |
Vulnerabilities 1
-
High 7.1
Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications
A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a…