Red Hat Product Errata RHSA-2026:47177 - Security Advisory
Issued:
2026-07-28
Updated:
2026-07-28

RHSA-2026:47177 - Security Advisory

Synopsis

Important: yelp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for yelp is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Security Fix(es):

  • yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2494110 - CVE-2026-13601 yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications

Red Hat Enterprise Linux for x86_64 8

SRPM
yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed
x86_64
yelp-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: bca6b39193edff9a1d599fb6f624201ce7d199ac15748d997a53d4708d68683a
yelp-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: 8a670acb1691270c03230aa07f41a1a58a4b31f159cc2bf5d282188b331500a3
yelp-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 0faaf258a9f41e951d92dbdb5106b94cdb0ec2c45fe71bd8dfd53a3e955b8b53
yelp-debugsource-3.28.1-3.el8_10.2.i686.rpm SHA-256: 3a8be6a33d4aa68164c08bc40eeb8e99cbe5c1d698ac7de1a437274e6551ac72
yelp-debugsource-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 1e41974e4852cbf98b2254008d3d2bed6780d56d3c002fd05f958c498e6ba1bf
yelp-libs-3.28.1-3.el8_10.2.i686.rpm SHA-256: 4cd933e10d14a110c6eb0348aa9fcd99d8e35829f042e6e81bc739dc78acc6b2
yelp-libs-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 2701f00d90a1371daa5bc4c4d5303a004b354b97f0275cc96c7fa511d8a7dd7d
yelp-libs-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: d0cc78aa75aafd421547713bd3e9fcc87344b58204bbfcdeb533085d2e6c2f5d
yelp-libs-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 221e1c6357ff78bbf4a030d094eadfe4a5daf1f7fa30715a2bbd0b2b05dcb62d

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed
s390x
yelp-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 6000361882ddcb90c0250c1e0643c4009dbb575c05291c61a5ff4475b836bc65
yelp-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 5aff751e271099712a35d7e9a602b826e0e964b43b8030207f38acb2d902f858
yelp-debugsource-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 8ef672cb3a37d565a78356dcf881bcb1fee0ffceb6fa053eb706390e875160da
yelp-libs-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 71b3ff70747a771d19f3cec43300673555f31c360aea9934e7a77c30d5d2a0b5
yelp-libs-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: fefe77d498669315e035d7007c5b371d52037245048b4248a112b112f2579d54

Red Hat Enterprise Linux for Power, little endian 8

SRPM
yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed
ppc64le
yelp-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 66e52470073682941af05a303210e8c0daf671ff8638282cf7d7fff85a592189
yelp-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: ecc0b63de3d28ca6d9a8f8ad0c93ca3c98073042f008989ffb92705ed03b50e4
yelp-debugsource-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: e1c74486a628bd7e6491778cff7f563bc83d89a562dff77db1ec504573ad382c
yelp-libs-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 83bae9f379a85803585f27d4c3e767dda8074d961c298e3e68c8987cbf98f742
yelp-libs-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 99124b5bb4e38b78fee5a9fd71025ae28c349668022a2fdf02a167cd63a7118e

Red Hat Enterprise Linux for ARM 64 8

SRPM
yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed
aarch64
yelp-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: ffc17d100d6df46c08ef4a91d1839c50833489534df9edbf1ad35cdef61ee2b7
yelp-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: 96f8c6242ec8c37d17a6eac670b0d330d4cff8251f44d261c7e1f4685352a2cf
yelp-debugsource-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: d036da2f5273b5817f29ed88aacf17d58d09dbb1bb27bb044c7b3fe00953f0e3
yelp-libs-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: ed628cc88511cf92caa356da4f02cb4277adb78c49abaff4b9e003b5a54bb125
yelp-libs-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: b714814b7072c5e0f261692a2e5e180a1dd6f641f723adeae35d219e1a96e156

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
yelp-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: 8a670acb1691270c03230aa07f41a1a58a4b31f159cc2bf5d282188b331500a3
yelp-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 0faaf258a9f41e951d92dbdb5106b94cdb0ec2c45fe71bd8dfd53a3e955b8b53
yelp-debugsource-3.28.1-3.el8_10.2.i686.rpm SHA-256: 3a8be6a33d4aa68164c08bc40eeb8e99cbe5c1d698ac7de1a437274e6551ac72
yelp-debugsource-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 1e41974e4852cbf98b2254008d3d2bed6780d56d3c002fd05f958c498e6ba1bf
yelp-devel-3.28.1-3.el8_10.2.i686.rpm SHA-256: cc705b7a4382ec8e99c863653da935dcce3548a0a857de6dc604f59094def404
yelp-devel-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 9300df0e4e01d22114b0fb38e96be7d71b9095f228b1e404572b39799bc02ffc
yelp-libs-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: d0cc78aa75aafd421547713bd3e9fcc87344b58204bbfcdeb533085d2e6c2f5d
yelp-libs-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 221e1c6357ff78bbf4a030d094eadfe4a5daf1f7fa30715a2bbd0b2b05dcb62d

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
yelp-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: ecc0b63de3d28ca6d9a8f8ad0c93ca3c98073042f008989ffb92705ed03b50e4
yelp-debugsource-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: e1c74486a628bd7e6491778cff7f563bc83d89a562dff77db1ec504573ad382c
yelp-devel-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: e2cabfb72b8b8e0cf420b1d6f94469d8d43e62656605de33a8cf7a965c70c183
yelp-libs-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 99124b5bb4e38b78fee5a9fd71025ae28c349668022a2fdf02a167cd63a7118e

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
yelp-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: 96f8c6242ec8c37d17a6eac670b0d330d4cff8251f44d261c7e1f4685352a2cf
yelp-debugsource-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: d036da2f5273b5817f29ed88aacf17d58d09dbb1bb27bb044c7b3fe00953f0e3
yelp-devel-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: 34021c68106ec595924b0280e45439913147091afaa9647102e05e315dae5620
yelp-libs-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: b714814b7072c5e0f261692a2e5e180a1dd6f641f723adeae35d219e1a96e156

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
yelp-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 5aff751e271099712a35d7e9a602b826e0e964b43b8030207f38acb2d902f858
yelp-debugsource-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 8ef672cb3a37d565a78356dcf881bcb1fee0ffceb6fa053eb706390e875160da
yelp-devel-3.28.1-3.el8_10.2.s390x.rpm SHA-256: f634c040c0be194bb70a5f5c05dda9bfd21ed1216fa886a68ec51d39ec860e9e
yelp-libs-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: fefe77d498669315e035d7007c5b371d52037245048b4248a112b112f2579d54

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed
x86_64
yelp-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: bca6b39193edff9a1d599fb6f624201ce7d199ac15748d997a53d4708d68683a
yelp-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: 8a670acb1691270c03230aa07f41a1a58a4b31f159cc2bf5d282188b331500a3
yelp-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 0faaf258a9f41e951d92dbdb5106b94cdb0ec2c45fe71bd8dfd53a3e955b8b53
yelp-debugsource-3.28.1-3.el8_10.2.i686.rpm SHA-256: 3a8be6a33d4aa68164c08bc40eeb8e99cbe5c1d698ac7de1a437274e6551ac72
yelp-debugsource-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 1e41974e4852cbf98b2254008d3d2bed6780d56d3c002fd05f958c498e6ba1bf
yelp-libs-3.28.1-3.el8_10.2.i686.rpm SHA-256: 4cd933e10d14a110c6eb0348aa9fcd99d8e35829f042e6e81bc739dc78acc6b2
yelp-libs-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 2701f00d90a1371daa5bc4c4d5303a004b354b97f0275cc96c7fa511d8a7dd7d
yelp-libs-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: d0cc78aa75aafd421547713bd3e9fcc87344b58204bbfcdeb533085d2e6c2f5d
yelp-libs-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 221e1c6357ff78bbf4a030d094eadfe4a5daf1f7fa30715a2bbd0b2b05dcb62d

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed
aarch64
yelp-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: ffc17d100d6df46c08ef4a91d1839c50833489534df9edbf1ad35cdef61ee2b7
yelp-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: 96f8c6242ec8c37d17a6eac670b0d330d4cff8251f44d261c7e1f4685352a2cf
yelp-debugsource-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: d036da2f5273b5817f29ed88aacf17d58d09dbb1bb27bb044c7b3fe00953f0e3
yelp-libs-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: ed628cc88511cf92caa356da4f02cb4277adb78c49abaff4b9e003b5a54bb125
yelp-libs-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: b714814b7072c5e0f261692a2e5e180a1dd6f641f723adeae35d219e1a96e156

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed
ppc64le
yelp-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 66e52470073682941af05a303210e8c0daf671ff8638282cf7d7fff85a592189
yelp-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: ecc0b63de3d28ca6d9a8f8ad0c93ca3c98073042f008989ffb92705ed03b50e4
yelp-debugsource-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: e1c74486a628bd7e6491778cff7f563bc83d89a562dff77db1ec504573ad382c
yelp-libs-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 83bae9f379a85803585f27d4c3e767dda8074d961c298e3e68c8987cbf98f742
yelp-libs-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 99124b5bb4e38b78fee5a9fd71025ae28c349668022a2fdf02a167cd63a7118e

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed
s390x
yelp-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 6000361882ddcb90c0250c1e0643c4009dbb575c05291c61a5ff4475b836bc65
yelp-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 5aff751e271099712a35d7e9a602b826e0e964b43b8030207f38acb2d902f858
yelp-debugsource-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 8ef672cb3a37d565a78356dcf881bcb1fee0ffceb6fa053eb706390e875160da
yelp-libs-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 71b3ff70747a771d19f3cec43300673555f31c360aea9934e7a77c30d5d2a0b5
yelp-libs-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: fefe77d498669315e035d7007c5b371d52037245048b4248a112b112f2579d54

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.