Most recent entries from all

ALSA-2025:10110 — Important: sudo security update

Affected: AlmaLinux:8: sudo

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

* sudo: LPE via host option (CVE-2025-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-08356

BELL-CVE-2025-32462

Affected: Alpaquita:23: sudo, Alpaquita:25: sudo, Alpaquita:stream: sudo

certfr-2025-avi-0622 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

certfr-2025-avi-0622

EUVD-2026-336323

fkie_cve-2025-32462

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

GHSA-c5x2-97hm-x895

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

ICSA-26-202-04 — Siemens SIDIS Secured SmartPlug

SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.

Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

msrc_CVE-2025-32462 — Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL

msrc_CVE-2025-32462

NCSC-2026-0229 — Kwetsbaarheden verholpen in Siemens producten

NCSC-2026-0229

OESA-2025-1733 — sudo security update

Affected: openEuler:22.03-LTS-SP3: sudo

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fix(es):

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

openSUSE-SU-2025:15298-1 — sudo-1.9.17p1-1.1 on GA media

sudo-1.9.17p1-1.1 on GA media

RHSA-2025:10383 — Red Hat Security Advisory: sudo security update

sudo: LPE via host option

SSA-585531 — SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310

SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.

Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

SUSE-SU-2025:02174-1 — Security update for sudo

Security update for sudo

UBUNTU-CVE-2025-32462

Affected: Ubuntu:Pro:14.04:LTS: sudo, Ubuntu:Pro:16.04:LTS: sudo, Ubuntu:Pro:18.04:LTS: sudo, Ubuntu:Pro:20.04:LTS: sudo, Ubuntu:22.04:LTS: sudo, Ubuntu:24.04:LTS: sudo

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

WID-SEC-W-2025-1428 — sudo: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in sudo ausnutzen, um Sicherheitsvorkehrungen zu umgehen und seine Rechte auf "root" zu erweitern.