Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power

 View Only
Back to discussions
Expand all | Collapse all

CVE-2025-32463 in sudo - Fixed in 1.9.17p1

  • 1.  CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Tue July 01, 2025 01:47 PM

    Hey OSS-Team,

    we need sudo in version 1.9.17p1, because the the CVE-2025-32463 is rated with a 9,3 and we have to fix that asap.

    Please check: https://nvd.nist.gov/vuln/detail/CVE-2025-32463

    Many thanks in advance



    ------------------------------
    Niklas Vosskoetter
    Deputy Team Lead & System Engineer Unix and Cloud Service Power
    ------------------------------

    #AIXOpenSource


  • 2.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Wed July 02, 2025 05:59 AM

    Hi Niklas,
    Thanks for reporting. We are working on updating to this version of sudo.



    ------------------------------
    RESHMA KUMAR
    ------------------------------

    Original Message


  • 3.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Wed July 02, 2025 10:05 AM

    Thanks Reshma for the update - any timeline available for the fix/update?



    ------------------------------
    Peter Schlafmann
    ------------------------------

    Original Message


  • 4.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Thu July 03, 2025 01:42 AM

    Hi Peter,
    We will make it available by next week.



    ------------------------------
    RESHMA KUMAR
    ------------------------------

    Original Message


  • 5.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Mon July 07, 2025 03:38 AM

    Thanks Reshma for the update - would you pls.- also provide a new "sudo_ids" package, which solves that CVE?
    Thanks + Regards, Robert John



    ------------------------------
    Robert John
    ------------------------------

    Original Message


  • 6.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Thu July 10, 2025 07:41 AM

    Hi Reshma, any update on this - my customer is urgently waiting for the fixed version.

    kind regards Peter



    ------------------------------
    Peter Schlafmann
    ------------------------------

    Original Message


  • 7.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Thu July 10, 2025 10:40 AM

    Hello,   Is there a date set for availability of this?

    Thanks,

    Don Brodie



    ------------------------------
    Don brodie
    ------------------------------

    Original Message


  • 8.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Fri July 11, 2025 01:20 AM

    Hi All,
    Sudo 1.9.17p1 is now available in AIX Toolbox. Please use DNF to update to this version.
    sudo-1.9.17p1-1.aix7.1.ppc.rpm
    sudo_ids-1.9.17p1-1.aix7.1.ppc.rpm
    sudo_noldap-1.9.17p1-1.aix7.1.ppc.rpm



    ------------------------------
    RESHMA KUMAR
    ------------------------------

    Original Message


  • 9.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Tue July 15, 2025 11:53 PM

    Hi Reshma,

    not able to download the pkg sudo-1.9.17p1-1.aix7.1.ppc.rpm

    Regards

    Venkata B



    ------------------------------
    Boost unix
    ------------------------------

    Original Message


  • 10.  RE: CVE-2025-32463 in sudo - Fixed in 1.9.17p1

    Posted Tue July 22, 2025 02:22 AM

    Hey OSS-Team,

    many thanks for the new packages. Tests were successful and the rollout was started.



    ------------------------------
    Niklas Vosskoetter
    Deputy Team Lead & System Engineer Unix and Cloud Service Power
    ------------------------------

    Original Message


Related Content