Summary
[2:3.28.1-1.0.1]
- Backport fix for CVE-2026-13601 [Orabug: 39908376]
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | yelp | 2:3.28.1-1.0.1.el7 |
| Oracle Linux · 7 | yelp-devel | 2:3.28.1-1.0.1.el7 |
| Oracle Linux · 7 | yelp-libs | 2:3.28.1-1.0.1.el7 |
Vulnerabilities 1
-
High 7.1
Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications
A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a…