Описание
Security update for sudo
This update for sudo fixes the following issues:
- CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).
Список пакетов
Container suse/sle-micro-rancher/5.2:latest
sudo-1.9.5p2-150300.3.36.1
Container suse/sle-micro/5.1/toolbox:latest
sudo-1.9.5p2-150300.3.36.1
Container suse/sle-micro/5.2/toolbox:latest
sudo-1.9.5p2-150300.3.36.1
Image SLES15-SP3-Micro-5-2-BYOS-Azure
sudo-1.9.5p2-150300.3.36.1
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
sudo-1.9.5p2-150300.3.36.1
Image SLES15-SP3-Micro-5-2-BYOS-GCE
sudo-1.9.5p2-150300.3.36.1
SUSE Enterprise Storage 7.1
sudo-1.9.5p2-150300.3.36.1
sudo-devel-1.9.5p2-150300.3.36.1
sudo-plugin-python-1.9.5p2-150300.3.36.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
sudo-1.9.5p2-150300.3.36.1
sudo-devel-1.9.5p2-150300.3.36.1
sudo-plugin-python-1.9.5p2-150300.3.36.1
SUSE Linux Enterprise Micro 5.1
sudo-1.9.5p2-150300.3.36.1
SUSE Linux Enterprise Micro 5.2
sudo-1.9.5p2-150300.3.36.1
SUSE Linux Enterprise Server 15 SP3-LTSS
sudo-1.9.5p2-150300.3.36.1
sudo-devel-1.9.5p2-150300.3.36.1
sudo-plugin-python-1.9.5p2-150300.3.36.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
sudo-1.9.5p2-150300.3.36.1
sudo-devel-1.9.5p2-150300.3.36.1
sudo-plugin-python-1.9.5p2-150300.3.36.1
Ссылки
- Link for SUSE-SU-2025:02175-1
- E-Mail link for SUSE-SU-2025:02175-1
- SUSE Security Ratings
- SUSE Bug 1245274
- SUSE CVE CVE-2025-32462 page
Описание
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:sudo-1.9.5p2-150300.3.36.1
Container suse/sle-micro/5.1/toolbox:latest:sudo-1.9.5p2-150300.3.36.1
Container suse/sle-micro/5.2/toolbox:latest:sudo-1.9.5p2-150300.3.36.1
Image SLES15-SP3-Micro-5-2-BYOS-Azure:sudo-1.9.5p2-150300.3.36.1
Ссылки
- CVE-2025-32462
- SUSE Bug 1245274