Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:11537

Опубликовано: 03 окт. 2025
Источник: rocky
Оценка: Important

Описание

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: LPE via host option (CVE-2025-32462)

  • sudo: LPE via chroot option (CVE-2025-32463)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
sudo-python-pluginaarch648.p5.el10_0.2sudo-python-plugin-1.9.15-8.p5.el10_0.2.aarch64.rpm
sudo-python-pluginx86_648.p5.el10_0.2sudo-python-plugin-1.9.15-8.p5.el10_0.2.x86_64.rpm
sudoaarch648.p5.el10_0.2sudo-1.9.15-8.p5.el10_0.2.aarch64.rpm
sudox86_648.p5.el10_0.2sudo-1.9.15-8.p5.el10_0.2.x86_64.rpm

Показывать по

Связанные CVE

CVE-2025-32462
CVE-2025-32463

Ссылки на источники

Исправления

Связанные уязвимости

suse-cvrf логотип

SUSE-SU-2025:02177-1

suse-cvrf
около 1 года назад

Security update for sudo

oracle-oval логотип

ELSA-2025-11537

oracle-oval
около 1 года назад

ELSA-2025-11537: sudo security update (IMPORTANT)

redos логотип

ROS-20250707-06

CVSS3: 9.3
redos
около 1 года назад

Множественные уязвимости sudo

ubuntu логотип

CVE-2025-32463

CVSS3: 9.3
ubuntu
около 1 года назад

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

redhat логотип

CVE-2025-32463

CVSS3: 7.8
redhat
около 1 года назад

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.