Red Hat Security Advisory: sudo security update

Fixed packages 5

Vulnerabilities 2

• Critical 9.3
  CVE-2025-32463 Exploited Public exploit EPSS 56%

  Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…

  sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 30, 2025

  KEV Sep 29, 2025
• Low 2.8
  CVE-2025-32462 Public exploit

  Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, all…

  sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 30, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2374692
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2374693
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11537.json
• report
  https://access.redhat.com/security/cve/CVE-2025-32462
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32462
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32462
• article
  https://www.stratascale.com/resource/cve-2025-32462-sudo-host-option-vulnerability/
• article
  https://www.sudo.ws/security/advisories/host_any/
• report
  https://access.redhat.com/security/cve/CVE-2025-32463
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32463
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32463
• article
  https://www.stratascale.com/resource/cve-2025-32463-sudo-chroot-elevation-of-privilege/
• article
  https://www.sudo.ws/security/advisories/chroot_bug/
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog