AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
  • 1.  CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Tue July 01, 2025 01:47 PM

    Hey OSS-Team,

    we need sudo in version 1.9.17p1, because the the CVE-2025-32463 is rated with a 9,3 and we have to fix that asap.

    Please check: https://nvd.nist.gov/vuln/detail/CVE-2025-32463

    Many thanks in advance



    ------------------------------
    Niklas Vosskoetter
    Deputy Team Lead & System Engineer Unix and Cloud Service Power
    ------------------------------


  • 2.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 30 days ago

    Hi Niklas,
    Thanks for reporting. We are working on updating to this version of sudo.



    ------------------------------
    RESHMA KUMAR
    ------------------------------



  • 3.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 30 days ago

    Thanks Reshma for the update - any timeline available for the fix/update?



    ------------------------------
    Peter Schlafmann
    ------------------------------



  • 4.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 30 days ago

    Hi Peter,
    We will make it available by next week.



    ------------------------------
    RESHMA KUMAR
    ------------------------------



  • 5.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 26 days ago

    Thanks Reshma for the update - would you pls.- also provide a new "sudo_ids" package, which solves that CVE?
    Thanks + Regards, Robert John



    ------------------------------
    Robert John
    ------------------------------



  • 6.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 22 days ago

    Hi Reshma, any update on this - my customer is urgently waiting for the fixed version.

    kind regards Peter



    ------------------------------
    Peter Schlafmann
    ------------------------------



  • 7.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 22 days ago

    Hello,   Is there a date set for availability of this?

    Thanks,

    Don Brodie



    ------------------------------
    Don brodie
    ------------------------------



  • 8.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 22 days ago

    Hi All,
    Sudo 1.9.17p1 is now available in AIX Toolbox. Please use DNF to update to this version.
    sudo-1.9.17p1-1.aix7.1.ppc.rpm
    sudo_ids-1.9.17p1-1.aix7.1.ppc.rpm
    sudo_noldap-1.9.17p1-1.aix7.1.ppc.rpm



    ------------------------------
    RESHMA KUMAR
    ------------------------------



  • 9.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 17 days ago

    Hi Reshma,

    not able to download the pkg sudo-1.9.17p1-1.aix7.1.ppc.rpm

    Regards

    Venkata B



    ------------------------------
    Boost unix
    ------------------------------



  • 10.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted 11 days ago

    Hey OSS-Team,

    many thanks for the new packages. Tests were successful and the rollout was started.



    ------------------------------
    Niklas Vosskoetter
    Deputy Team Lead & System Engineer Unix and Cloud Service Power
    ------------------------------