RHSA-2026:54624: Important: yelp security update
Important: yelp security update
Other sources
Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.Security Fix(es): yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/yelpto a version that resolves this vulnerability.Fixed in 3.28.1-3.el8_8.2 - Upgrade
Upgrade
redhat/yelp-debuginfoto a version that resolves this vulnerability.Fixed in 3.28.1-3.el8_8.2 - Upgrade
Upgrade
redhat/yelp-debugsourceto a version that resolves this vulnerability.Fixed in 3.28.1-3.el8_8.2 - Upgrade
Upgrade
redhat/yelp-libsto a version that resolves this vulnerability.Fixed in 3.28.1-3.el8_8.2 - Upgrade
Upgrade
redhat/yelp-libs-debuginfoto a version that resolves this vulnerability.Fixed in 3.28.1-3.el8_8.2
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:54624?
The severity of RHSA-2026:54624 is high, rated at 7.
What vulnerabilities are addressed in RHSA-2026:54624?
RHSA-2026:54624 addresses an overly permissive vulnerability in the yelp-xsl component.
How do I fix RHSA-2026:54624?
To fix RHSA-2026:54624, you need to apply the security update for the yelp packages provided by Red Hat.
Which systems are affected by RHSA-2026:54624?
RHSA-2026:54624 affects various Red Hat Enterprise Linux systems that include yelp.
Is there a risk associated with RHSA-2026:54624?
Yes, RHSA-2026:54624 has a risk score of 33, indicating a significant vulnerability.