Alerts This Week
Warning Icon 1 1,394
Alerts This Week
Warning Icon 1 1,394

Fedora 44 Yelp 49.1 Critical CSP Exfiltration Advisory 2026-ed4f450fa9

fedora
Calendar Grey May 17, 2026
Dist Fedora Esm H88
Yelp 49.1 update addresses CSP issues allowing Flatpak apps to exfiltrate host files, enhancing security on Fedora 44.
Yelp 49.1, fixing: Flatpak applications are able to exfiltrate host files due to yelp's CSP being too permissive

Summary

Yelp is the help browser for the GNOME desktop. It is designed

to help you browse all the documentation on your system in

one central tool, including traditional man pages, info pages and

documentation written in DocBook.

Update Information:

Yelp 49.1, fixing: Flatpak applications are able to exfiltrate host files due to yelp's CSP being too permissive

Topics%20covered

Topics Covered

security advisory fedora critical yelp CSP application exfiltration

Change Log

* Wed May 6 2026 Packit - 2:49.1-1 - Update to 49.1 upstream release * Mon Mar 2 2026 Jan Grulich - 2:49.0-5 - Packit: drop upstream_project_url and rely on release-monitoring only * Wed Feb 25 2026 Jan Grulich - 2:49.0-4 - Packit: drop fast_forward_merge_into as current stable branches diverge * Tue Feb 24 2026 Jan Grulich - 2:49.0-3 - Onboard to Packit for stable Fedora branches

References

Fedora Update Notification FEDORA-2026-ed4f450fa9 2026-05-17 01:26:47.130151+00:00 Name : yelp Product : Fedora 44 Version : 49.1 Release : 1.fc44 URL : https://wiki.gnome.org/Apps/Yelp Summary : Help browser for the GNOME desktop Description : Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ed4f450fa9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: yelp
Product: Fedora 44
Version: 49.1
Release: 1.fc44
URL: https://wiki.gnome.org/Apps/Yelp
Summary: Help browser for the GNOME desktop

Topics%20covered

Topics Covered

security advisory fedora critical yelp CSP application exfiltration

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here