Описание
ELSA-2025-11537: sudo security update (IMPORTANT)
[1.9.15-8.p5.2]
- RHEL 10.1 ERRATUM
- CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
- CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
sudo-python-plugin
1.9.15-8.p5.el10_0.2
sudo
1.9.15-8.p5.el10_0.2
Oracle Linux x86_64
sudo
1.9.15-8.p5.el10_0.2
sudo-python-plugin
1.9.15-8.p5.el10_0.2
Связанные CVE
Связанные уязвимости
CVSS3: 9.3
ubuntu
2 месяца назад
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS3: 7.8
redhat
2 месяца назад
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS3: 9.3
nvd
2 месяца назад
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.