ELSA-2025-11537 — Important: sudo security update (Oracle Linux 10)

Summary

[1.9.15-8.p5.2]
- RHEL 10.1 ERRATUM
- CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
- CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 10	sudo	0:1.9.15-8.p5.el10_0.2
Oracle Linux · 10	sudo-python-plugin	0:1.9.15-8.p5.el10_0.2

Vulnerabilities 2

Critical 9.3

CVE-2025-32463 Exploited Public exploit EPSS 56%

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…

sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi

Jun 30, 2025
KEV Sep 29, 2025
Low 2.8

CVE-2025-32462 Public exploit

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, all…

sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi

Jun 30, 2025

Important: sudo security update (Oracle Linux 10)

Summary

Fixed packages 2

Vulnerabilities 2

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, all…