The sudo versions in Fedora 41, 42, and Rawhide are all 1.9.15, which is an affected version. Since this security issue has high severity, could the latest sudo version be packed as soon as possible?

The sudo's chroot feature should be removed asap

There is public PoC for this vulnerability.

https://github.com/pr0v3rbs/CVE-2025-32463_chwoot
https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot

Works like charm on Fedora 41

(In reply to Michal Ambroz from comment #4)
> There is public PoC for this vulnerability.
> 
> https://github.com/pr0v3rbs/CVE-2025-32463_chwoot
> https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot
> 
> Works like charm on Fedora 41

But the sudo in RHEL9 (1.9.5p2) actually support chroot and reponse correctly with this kind of malicious library files in the directory. It prints " you are not permitted to use the -R option with woot"
How come the problematic code slip into the RHEL10 release?

note that upstream didn't properly document it, but 1.9.17pl1 fixes both CVE-2025-32462 and CVE-2025-32463

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2025:11537 https://access.redhat.com/errata/RHSA-2025:11537

(In reply to Fanky W from comment #5)
> (In reply to Michal Ambroz from comment #4)
> > There is public PoC for this vulnerability.
> > 
> > https://yoplay.io https://github.com/pr0v3rbs/CVE-2025-32463_chwoot 
> > https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot
> > 
> > Works like charm on Fedora 41
> 
> But the sudo in RHEL9 (1.9.5p2) actually support chroot and reponse
> correctly with this kind of malicious library files in the directory. It
> prints " you are not permitted to use the -R option with woot"
> How come the problematic code slip into the RHEL10 release?

Link ID: Red Hat Product Errata RHSA-2025:11538