Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-32462: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | sudo | 0:1.8.23-10.amzn2.3.8 |
| Amazon Linux · 2 | sudo-debuginfo | 0:1.8.23-10.amzn2.3.8 |
| Amazon Linux · 2 | sudo-devel | 0:1.8.23-10.amzn2.3.8 |
Vulnerabilities 1
-
Low 2.8CVE-2025-32462 Public exploit
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, all…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-32462.html