RHSA-2026:54637: Important: yelp security update
Important: yelp security update
Other sources
Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.Security Fix(es): yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/yelpto a version that resolves this vulnerability.Fixed in 40.3-2.el9_2.2.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:54637?
The severity of RHSA-2026:54637 is classified as high with a score of 7.
What vulnerabilities are addressed in RHSA-2026:54637?
RHSA-2026:54637 addresses vulnerabilities in yelp's yelp-xsl component, which is overly permissive.
How do I fix RHSA-2026:54637?
To fix RHSA-2026:54637, apply the security update for yelp as provided by Red Hat.
Who is affected by RHSA-2026:54637?
RHSA-2026:54637 affects users of Red Hat Enterprise Linux on platforms including x86_64, IBM z Systems, and ARM 64.
What is Yelp in relation to RHSA-2026:54637?
Yelp is the help browser for the GNOME desktop that provides access to various documentation resources.