OESA-2025-1737

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1737
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1737.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1737
Upstream
Published
2025-07-04T14:43:47Z
Modified
2025-08-12T05:50:33.873679Z
Summary
sudo security update
Details

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

Database specific
{
    "severity": "Low"
}
References

Affected packages

openEuler:20.03-LTS-SP4 / sudo

Package

Name
sudo
Purl
pkg:rpm/openEuler/sudo&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.9.2-18.oe2003sp4

Ecosystem specific

{
    "x86_64": [
        "sudo-1.9.2-18.oe2003sp4.x86_64.rpm",
        "sudo-debuginfo-1.9.2-18.oe2003sp4.x86_64.rpm",
        "sudo-debugsource-1.9.2-18.oe2003sp4.x86_64.rpm",
        "sudo-devel-1.9.2-18.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "sudo-1.9.2-18.oe2003sp4.src.rpm"
    ],
    "noarch": [
        "sudo-help-1.9.2-18.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "sudo-1.9.2-18.oe2003sp4.aarch64.rpm",
        "sudo-debuginfo-1.9.2-18.oe2003sp4.aarch64.rpm",
        "sudo-debugsource-1.9.2-18.oe2003sp4.aarch64.rpm",
        "sudo-devel-1.9.2-18.oe2003sp4.aarch64.rpm"
    ]
}