Amazon Linux 2 Security Advisory: ALAS2-2025-2924
Advisory Released Date: 2025-07-10
Advisory Updated Date: 2025-07-10
Severity:
Important
Issue Overview:
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines. (CVE-2025-32462)
Affected Packages:
sudo
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update sudo to update your system.
New Packages:
aarch64:
sudo-1.8.23-10.amzn2.3.8.aarch64
sudo-devel-1.8.23-10.amzn2.3.8.aarch64
sudo-debuginfo-1.8.23-10.amzn2.3.8.aarch64
i686:
sudo-1.8.23-10.amzn2.3.8.i686
sudo-devel-1.8.23-10.amzn2.3.8.i686
sudo-debuginfo-1.8.23-10.amzn2.3.8.i686
src:
sudo-1.8.23-10.amzn2.3.8.src
x86_64:
sudo-1.8.23-10.amzn2.3.8.x86_64
sudo-devel-1.8.23-10.amzn2.3.8.x86_64
sudo-debuginfo-1.8.23-10.amzn2.3.8.x86_64