Red Hat Product Errata RHSA-2026:47177 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47177 - Security Advisory Overview Updated Packages Synopsis Important: yelp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for yelp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fix(es): yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2494110 - CVE-2026-13601 yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications CVEs CVE-2026-13601 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed x86_64 yelp-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: bca6b39193edff9a1d599fb6f624201ce7d199ac15748d997a53d4708d68683a yelp-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: 8a670acb1691270c03230aa07f41a1a58a4b31f159cc2bf5d282188b331500a3 yelp-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 0faaf258a9f41e951d92dbdb5106b94cdb0ec2c45fe71bd8dfd53a3e955b8b53 yelp-debugsource-3.28.1-3.el8_10.2.i686.rpm SHA-256: 3a8be6a33d4aa68164c08bc40eeb8e99cbe5c1d698ac7de1a437274e6551ac72 yelp-debugsource-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 1e41974e4852cbf98b2254008d3d2bed6780d56d3c002fd05f958c498e6ba1bf yelp-libs-3.28.1-3.el8_10.2.i686.rpm SHA-256: 4cd933e10d14a110c6eb0348aa9fcd99d8e35829f042e6e81bc739dc78acc6b2 yelp-libs-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 2701f00d90a1371daa5bc4c4d5303a004b354b97f0275cc96c7fa511d8a7dd7d yelp-libs-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: d0cc78aa75aafd421547713bd3e9fcc87344b58204bbfcdeb533085d2e6c2f5d yelp-libs-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 221e1c6357ff78bbf4a030d094eadfe4a5daf1f7fa30715a2bbd0b2b05dcb62d Red Hat Enterprise Linux for IBM z Systems 8 SRPM yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed s390x yelp-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 6000361882ddcb90c0250c1e0643c4009dbb575c05291c61a5ff4475b836bc65 yelp-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 5aff751e271099712a35d7e9a602b826e0e964b43b8030207f38acb2d902f858 yelp-debugsource-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 8ef672cb3a37d565a78356dcf881bcb1fee0ffceb6fa053eb706390e875160da yelp-libs-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 71b3ff70747a771d19f3cec43300673555f31c360aea9934e7a77c30d5d2a0b5 yelp-libs-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: fefe77d498669315e035d7007c5b371d52037245048b4248a112b112f2579d54 Red Hat Enterprise Linux for Power, little endian 8 SRPM yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed ppc64le yelp-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 66e52470073682941af05a303210e8c0daf671ff8638282cf7d7fff85a592189 yelp-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: ecc0b63de3d28ca6d9a8f8ad0c93ca3c98073042f008989ffb92705ed03b50e4 yelp-debugsource-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: e1c74486a628bd7e6491778cff7f563bc83d89a562dff77db1ec504573ad382c yelp-libs-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 83bae9f379a85803585f27d4c3e767dda8074d961c298e3e68c8987cbf98f742 yelp-libs-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 99124b5bb4e38b78fee5a9fd71025ae28c349668022a2fdf02a167cd63a7118e Red Hat Enterprise Linux for ARM 64 8 SRPM yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed aarch64 yelp-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: ffc17d100d6df46c08ef4a91d1839c50833489534df9edbf1ad35cdef61ee2b7 yelp-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: 96f8c6242ec8c37d17a6eac670b0d330d4cff8251f44d261c7e1f4685352a2cf yelp-debugsource-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: d036da2f5273b5817f29ed88aacf17d58d09dbb1bb27bb044c7b3fe00953f0e3 yelp-libs-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: ed628cc88511cf92caa356da4f02cb4277adb78c49abaff4b9e003b5a54bb125 yelp-libs-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: b714814b7072c5e0f261692a2e5e180a1dd6f641f723adeae35d219e1a96e156 Red Hat CodeReady Linux Builder for x86_64 8 SRPM x86_64 yelp-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: 8a670acb1691270c03230aa07f41a1a58a4b31f159cc2bf5d282188b331500a3 yelp-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 0faaf258a9f41e951d92dbdb5106b94cdb0ec2c45fe71bd8dfd53a3e955b8b53 yelp-debugsource-3.28.1-3.el8_10.2.i686.rpm SHA-256: 3a8be6a33d4aa68164c08bc40eeb8e99cbe5c1d698ac7de1a437274e6551ac72 yelp-debugsource-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 1e41974e4852cbf98b2254008d3d2bed6780d56d3c002fd05f958c498e6ba1bf yelp-devel-3.28.1-3.el8_10.2.i686.rpm SHA-256: cc705b7a4382ec8e99c863653da935dcce3548a0a857de6dc604f59094def404 yelp-devel-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 9300df0e4e01d22114b0fb38e96be7d71b9095f228b1e404572b39799bc02ffc yelp-libs-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: d0cc78aa75aafd421547713bd3e9fcc87344b58204bbfcdeb533085d2e6c2f5d yelp-libs-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 221e1c6357ff78bbf4a030d094eadfe4a5daf1f7fa30715a2bbd0b2b05dcb62d Red Hat CodeReady Linux Builder for Power, little endian 8 SRPM ppc64le yelp-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: ecc0b63de3d28ca6d9a8f8ad0c93ca3c98073042f008989ffb92705ed03b50e4 yelp-debugsource-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: e1c74486a628bd7e6491778cff7f563bc83d89a562dff77db1ec504573ad382c yelp-devel-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: e2cabfb72b8b8e0cf420b1d6f94469d8d43e62656605de33a8cf7a965c70c183 yelp-libs-debuginfo-3.28.1-3.el8_10.2.ppc64le.rpm SHA-256: 99124b5bb4e38b78fee5a9fd71025ae28c349668022a2fdf02a167cd63a7118e Red Hat CodeReady Linux Builder for ARM 64 8 SRPM aarch64 yelp-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: 96f8c6242ec8c37d17a6eac670b0d330d4cff8251f44d261c7e1f4685352a2cf yelp-debugsource-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: d036da2f5273b5817f29ed88aacf17d58d09dbb1bb27bb044c7b3fe00953f0e3 yelp-devel-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: 34021c68106ec595924b0280e45439913147091afaa9647102e05e315dae5620 yelp-libs-debuginfo-3.28.1-3.el8_10.2.aarch64.rpm SHA-256: b714814b7072c5e0f261692a2e5e180a1dd6f641f723adeae35d219e1a96e156 Red Hat CodeReady Linux Builder for IBM z Systems 8 SRPM s390x yelp-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 5aff751e271099712a35d7e9a602b826e0e964b43b8030207f38acb2d902f858 yelp-debugsource-3.28.1-3.el8_10.2.s390x.rpm SHA-256: 8ef672cb3a37d565a78356dcf881bcb1fee0ffceb6fa053eb706390e875160da yelp-devel-3.28.1-3.el8_10.2.s390x.rpm SHA-256: f634c040c0be194bb70a5f5c05dda9bfd21ed1216fa886a68ec51d39ec860e9e yelp-libs-debuginfo-3.28.1-3.el8_10.2.s390x.rpm SHA-256: fefe77d498669315e035d7007c5b371d52037245048b4248a112b112f2579d54 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db5236d6b98ed x86_64 yelp-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: bca6b39193edff9a1d599fb6f624201ce7d199ac15748d997a53d4708d68683a yelp-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: 8a670acb1691270c03230aa07f41a1a58a4b31f159cc2bf5d282188b331500a3 yelp-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 0faaf258a9f41e951d92dbdb5106b94cdb0ec2c45fe71bd8dfd53a3e955b8b53 yelp-debugsource-3.28.1-3.el8_10.2.i686.rpm SHA-256: 3a8be6a33d4aa68164c08bc40eeb8e99cbe5c1d698ac7de1a437274e6551ac72 yelp-debugsource-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 1e41974e4852cbf98b2254008d3d2bed6780d56d3c002fd05f958c498e6ba1bf yelp-libs-3.28.1-3.el8_10.2.i686.rpm SHA-256: 4cd933e10d14a110c6eb0348aa9fcd99d8e35829f042e6e81bc739dc78acc6b2 yelp-libs-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 2701f00d90a1371daa5bc4c4d5303a004b354b97f0275cc96c7fa511d8a7dd7d yelp-libs-debuginfo-3.28.1-3.el8_10.2.i686.rpm SHA-256: d0cc78aa75aafd421547713bd3e9fcc87344b58204bbfcdeb533085d2e6c2f5d yelp-libs-debuginfo-3.28.1-3.el8_10.2.x86_64.rpm SHA-256: 221e1c6357ff78bbf4a030d094eadfe4a5daf1f7fa30715a2bbd0b2b05dcb62d Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM yelp-3.28.1-3.el8_10.2.src.rpm SHA-256: 811ac24102495a7f9caaafa48d8abf1f12eda693fcca417a426db523