Описание
Security update for sudo
This update for sudo fixes the following issues:
- CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).
- CVE-2025-32463: Fixed a possible local privilege Escalation via chroot option (bsc#1245275).
Список пакетов
Container bci/spack:0.23
sudo-1.9.15p5-150600.3.9.1
Container bci/spack:latest
sudo-1.9.15p5-150600.3.9.1
Container suse/manager/5.0/x86_64/server:latest
sudo-1.9.15p5-150600.3.9.1
Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest
sudo-1.9.15p5-150600.3.9.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-Azure-3P
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-Azure-Basic
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-Azure-Standard
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-BYOS
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-CHOST-BYOS
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-CHOST-BYOS-Aliyun
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-CHOST-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-CHOST-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-CHOST-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-CHOST-BYOS-GDC
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-EC2-ECS-HVM
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-HPC
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-HPC-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-HPC-BYOS
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-HPC-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-HPC-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-HPC-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-HPC-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-HPC-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-Hardened-BYOS
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-Hardened-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-Hardened-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-Hardened-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Azure-3P
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-BYOS
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Hardened
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Hardened-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Hardened-BYOS
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Hardened-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAP-Hardened-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAPCAL
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAPCAL-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAPCAL-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP6-SAPCAL-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-Azure-3P
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-Azure-Basic
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-Azure-Standard
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-CHOST-BYOS-Aliyun
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-CHOST-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-CHOST-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-CHOST-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-CHOST-BYOS-GDC
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-EC2-ECS-HVM
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-GCE-3P
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-HPC-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-HPC-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-HPC-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-HPC-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-Hardened-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-Hardened-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-Hardened-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Azure-3P
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-GCE-3P
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Hardened-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAP-Hardened-GCE
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAPCAL-Azure
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAPCAL-EC2
sudo-1.9.15p5-150600.3.9.1
Image SLES15-SP7-SAPCAL-GCE
sudo-1.9.15p5-150600.3.9.1
Image proxy-salt-broker-image
sudo-1.9.15p5-150600.3.9.1
Image server-image
sudo-1.9.15p5-150600.3.9.1
Image server-image-sles15sp7
sudo-1.9.15p5-150600.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
sudo-1.9.15p5-150600.3.9.1
sudo-devel-1.9.15p5-150600.3.9.1
sudo-plugin-python-1.9.15p5-150600.3.9.1
sudo-policy-sudo-auth-self-1.9.15p5-150600.3.9.1
sudo-policy-wheel-auth-self-1.9.15p5-150600.3.9.1
system-group-sudo-1.9.15p5-150600.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
sudo-1.9.15p5-150600.3.9.1
sudo-devel-1.9.15p5-150600.3.9.1
sudo-plugin-python-1.9.15p5-150600.3.9.1
sudo-policy-sudo-auth-self-1.9.15p5-150600.3.9.1
sudo-policy-wheel-auth-self-1.9.15p5-150600.3.9.1
system-group-sudo-1.9.15p5-150600.3.9.1
openSUSE Leap 15.6
sudo-1.9.15p5-150600.3.9.1
sudo-devel-1.9.15p5-150600.3.9.1
sudo-plugin-python-1.9.15p5-150600.3.9.1
sudo-policy-sudo-auth-self-1.9.15p5-150600.3.9.1
sudo-policy-wheel-auth-self-1.9.15p5-150600.3.9.1
sudo-test-1.9.15p5-150600.3.9.1
system-group-sudo-1.9.15p5-150600.3.9.1
Ссылки
- Link for SUSE-SU-2025:02177-1
- E-Mail link for SUSE-SU-2025:02177-1
- SUSE Security Ratings
- SUSE Bug 1245274
- SUSE Bug 1245275
- SUSE CVE CVE-2025-32462 page
- SUSE CVE CVE-2025-32463 page
Описание
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
Затронутые продукты
Container bci/spack:0.23:sudo-1.9.15p5-150600.3.9.1
Container bci/spack:latest:sudo-1.9.15p5-150600.3.9.1
Container suse/manager/5.0/x86_64/server:latest:sudo-1.9.15p5-150600.3.9.1
Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest:sudo-1.9.15p5-150600.3.9.1
Ссылки
- CVE-2025-32462
- SUSE Bug 1245274
Описание
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Затронутые продукты
Container bci/spack:0.23:sudo-1.9.15p5-150600.3.9.1
Container bci/spack:latest:sudo-1.9.15p5-150600.3.9.1
Container suse/manager/5.0/x86_64/server:latest:sudo-1.9.15p5-150600.3.9.1
Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest:sudo-1.9.15p5-150600.3.9.1
Ссылки
- CVE-2025-32463
- SUSE Bug 1245275