RHSA-2026:47178
Vulnerability from csaf_redhat - Published: 2026-08-03 07:08 - Updated: 2026-08-03 10:40Summary
Red Hat Security Advisory: yelp security update
Severity
Important
Notes
Topic: An update for yelp is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.
Security Fix(es):
* yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.
7.1 (High)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
11 references
Acknowledgments
Codean Labs
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for yelp is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.\n\nSecurity Fix(es):\n\n* yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47178",
"url": "https://access.redhat.com/errata/RHSA-2026:47178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2494110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494110"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47178.json"
}
],
"title": "Red Hat Security Advisory: yelp security update",
"tracking": {
"current_release_date": "2026-08-03T10:40:57+00:00",
"generator": {
"date": "2026-08-03T10:40:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:47178",
"initial_release_date": "2026-08-03T07:08:06+00:00",
"revision_history": [
{
"date": "2026-08-03T07:08:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-03T07:08:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-03T10:40:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "yelp-devel-2:40.3-3.el9_8.1.aarch64",
"product": {
"name": "yelp-devel-2:40.3-3.el9_8.1.aarch64",
"product_id": "yelp-devel-2:40.3-3.el9_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-devel@40.3-3.el9_8.1?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"product": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"product_id": "yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debugsource@40.3-3.el9_8.1?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"product": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"product_id": "yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debuginfo@40.3-3.el9_8.1?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"product": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"product_id": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs-debuginfo@40.3-3.el9_8.1?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-2:40.3-3.el9_8.1.aarch64",
"product": {
"name": "yelp-2:40.3-3.el9_8.1.aarch64",
"product_id": "yelp-2:40.3-3.el9_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp@40.3-3.el9_8.1?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-2:40.3-3.el9_8.1.aarch64",
"product": {
"name": "yelp-libs-2:40.3-3.el9_8.1.aarch64",
"product_id": "yelp-libs-2:40.3-3.el9_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs@40.3-3.el9_8.1?arch=aarch64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "yelp-devel-2:40.3-3.el9_8.1.i686",
"product": {
"name": "yelp-devel-2:40.3-3.el9_8.1.i686",
"product_id": "yelp-devel-2:40.3-3.el9_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-devel@40.3-3.el9_8.1?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debugsource-2:40.3-3.el9_8.1.i686",
"product": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.i686",
"product_id": "yelp-debugsource-2:40.3-3.el9_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debugsource@40.3-3.el9_8.1?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"product": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"product_id": "yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debuginfo@40.3-3.el9_8.1?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"product": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"product_id": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs-debuginfo@40.3-3.el9_8.1?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-2:40.3-3.el9_8.1.i686",
"product": {
"name": "yelp-libs-2:40.3-3.el9_8.1.i686",
"product_id": "yelp-libs-2:40.3-3.el9_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs@40.3-3.el9_8.1?arch=i686\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "yelp-devel-2:40.3-3.el9_8.1.x86_64",
"product": {
"name": "yelp-devel-2:40.3-3.el9_8.1.x86_64",
"product_id": "yelp-devel-2:40.3-3.el9_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-devel@40.3-3.el9_8.1?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"product": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"product_id": "yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debugsource@40.3-3.el9_8.1?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"product": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"product_id": "yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debuginfo@40.3-3.el9_8.1?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"product": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"product_id": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs-debuginfo@40.3-3.el9_8.1?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-2:40.3-3.el9_8.1.x86_64",
"product": {
"name": "yelp-2:40.3-3.el9_8.1.x86_64",
"product_id": "yelp-2:40.3-3.el9_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp@40.3-3.el9_8.1?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-2:40.3-3.el9_8.1.x86_64",
"product": {
"name": "yelp-libs-2:40.3-3.el9_8.1.x86_64",
"product_id": "yelp-libs-2:40.3-3.el9_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs@40.3-3.el9_8.1?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "yelp-devel-2:40.3-3.el9_8.1.ppc64le",
"product": {
"name": "yelp-devel-2:40.3-3.el9_8.1.ppc64le",
"product_id": "yelp-devel-2:40.3-3.el9_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-devel@40.3-3.el9_8.1?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"product": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"product_id": "yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debugsource@40.3-3.el9_8.1?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"product": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"product_id": "yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debuginfo@40.3-3.el9_8.1?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"product": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"product_id": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs-debuginfo@40.3-3.el9_8.1?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-2:40.3-3.el9_8.1.ppc64le",
"product": {
"name": "yelp-2:40.3-3.el9_8.1.ppc64le",
"product_id": "yelp-2:40.3-3.el9_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp@40.3-3.el9_8.1?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-2:40.3-3.el9_8.1.ppc64le",
"product": {
"name": "yelp-libs-2:40.3-3.el9_8.1.ppc64le",
"product_id": "yelp-libs-2:40.3-3.el9_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs@40.3-3.el9_8.1?arch=ppc64le\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "yelp-devel-2:40.3-3.el9_8.1.s390x",
"product": {
"name": "yelp-devel-2:40.3-3.el9_8.1.s390x",
"product_id": "yelp-devel-2:40.3-3.el9_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-devel@40.3-3.el9_8.1?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"product": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"product_id": "yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debugsource@40.3-3.el9_8.1?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"product": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"product_id": "yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-debuginfo@40.3-3.el9_8.1?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"product": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"product_id": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs-debuginfo@40.3-3.el9_8.1?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-2:40.3-3.el9_8.1.s390x",
"product": {
"name": "yelp-2:40.3-3.el9_8.1.s390x",
"product_id": "yelp-2:40.3-3.el9_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp@40.3-3.el9_8.1?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "yelp-libs-2:40.3-3.el9_8.1.s390x",
"product": {
"name": "yelp-libs-2:40.3-3.el9_8.1.s390x",
"product_id": "yelp-libs-2:40.3-3.el9_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp-libs@40.3-3.el9_8.1?arch=s390x\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "yelp-2:40.3-3.el9_8.1.src",
"product": {
"name": "yelp-2:40.3-3.el9_8.1.src",
"product_id": "yelp-2:40.3-3.el9_8.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yelp@40.3-3.el9_8.1?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-2:40.3-3.el9_8.1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.src"
},
"product_reference": "yelp-2:40.3-3.el9_8.1.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-libs-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-2:40.3-3.el9_8.1.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.i686"
},
"product_reference": "yelp-libs-2:40.3-3.el9_8.1.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-libs-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-libs-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-libs-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debuginfo-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-debugsource-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-devel-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-devel-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-devel-2:40.3-3.el9_8.1.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.i686"
},
"product_reference": "yelp-devel-2:40.3-3.el9_8.1.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-devel-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-devel-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-devel-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-devel-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-devel-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-devel-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64"
},
"product_reference": "yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Codean Labs"
]
}
],
"cve": "CVE-2026-13601",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"discovery_date": "2026-06-29T07:46:00.021000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494110"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak\u0027s intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects the Content Security Policy (CSP) implementation handling help documents rendered outside the application container via the Flatpak OpenURI portal. Red Hat Product Security has rated this issue as Important.\n\nThe flaw is caused by an overly permissive Content Security Policy (CSP) implementation that allows attacker-controlled help content to bypass Flatpak\u0027s intended sandbox isolation. A malicious Flatpak application can invoke Yelp through the standard OpenURI portal and supply crafted help content that causes the application to access and disclose arbitrary user-readable files from the host system.\n\nUnlike typical local file disclosure vulnerabilities, exploitation does not require privileges on the vulnerable Yelp application itself. A malicious Flatpak application can invoke Yelp through the standard OpenURI portal without requiring additional authorization or user interaction beyond running the application. Because the vulnerability enables a sandboxed Flatpak application to access resources outside its intended security boundary by leveraging the host\u0027s Yelp application, Red Hat Product Security considers this a cross-boundary information disclosure vulnerability. Under these conditions, an attacker may disclose arbitrary user-readable files from the host system. The currently available analysis does not demonstrate impacts to integrity or availability.\n\n```\n\nThis flaw arises as an upstream regression that reintroduced part of the functionality previously addressed by CVE-2025-3155.\n\nThe original upstream remediation for CVE-2025-3155 required coordinated changes in both the yelp application and the yelp-xsl stylesheet package. Red Hat Enterprise Linux streams that previously received backported fixes for CVE-2025-3155 are also affected by this regression.\n\nFor CVE-2026-13601, upstream has chosen to remediate the remaining vulnerability entirely within the yelp application. Consequently, this issue is remediated exclusively through security updates to the yelp package, and no additional updates to yelp-xsl are required for this CVE. Systems are fully protected once the corresponding yelp security update has been applied.\n\nHence, Red Hat Enterprise Linux is only required to update \"yelp\" package to get the fix.\n\nAlthough RHEL 10 and RHIVOS ship versions of yelp-xsl, the yelp application is not shipped or supported on those platforms. As a result, the vulnerable execution path is not present and those products are not affected.\n\n```",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.src",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13601"
},
{
"category": "external",
"summary": "RHBZ#2494110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494110"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13601"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13601",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13601"
},
{
"category": "external",
"summary": "https://blogs.gnome.org/mcatanzaro/2026/05/11/flatpak-sandbox-escape-via-yelp/",
"url": "https://blogs.gnome.org/mcatanzaro/2026/05/11/flatpak-sandbox-escape-via-yelp/"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/yelp/-/commit/c8c8244c8a812860782d635890c9b6c43ecc2639",
"url": "https://gitlab.gnome.org/GNOME/yelp/-/commit/c8c8244c8a812860782d635890c9b6c43ecc2639"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/yelp/-/work_items/238",
"url": "https://gitlab.gnome.org/GNOME/yelp/-/work_items/238"
}
],
"release_date": "2026-05-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T07:08:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.src",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47178"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the appropriate security update when they becomes available.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.src",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.src",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-2:40.3-3.el9_8.1.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debuginfo-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-debugsource-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-devel-2:40.3-3.el9_8.1.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.i686",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.s390x",
"CRB-9.8.0.Z.MAIN.EUS:yelp-libs-debuginfo-2:40.3-3.el9_8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…