Description
The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | yum | No fix yet | — |
| Ubuntu 16.04 LTS | yum | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | yum-updatesd | 1:0.9-6.el5_10 | RHSA-2014:1004 |
Advisories 1
- RHSA-2014:1004 Red Hat Security Advisory: yum-updatesd security update Red Hat Security Advisories (RHSA) · Jun 28, 2026