Red Hat Security AdvisoryRHSA-2025:11537
sudo security update
Released 2025-07-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) sudo-python-plugin-1.9.15-8.p5.el10_0.2
- Red Hat Enterprise Linux BaseOS (v. 10) sudo-1.9.15-8.p5.el10_0.2
Fixes 2 records
Priority CRITICAL 99KEV
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.563 · Published 2025-06-30 · Fixed in 1.9.17p1 CWE-829
Priority MEDIUM 45
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.04477 · Published 2025-06-30 · Fixed in 1.9.17p1 CWE-863
