关键漏洞信息 公告ID SUSE-SU-2025:2177-1 发布日期 2025-06-30T15:58:19Z 评级 重要 参考文献 bsc#1245274 bsc#1245275 相关CVE CVE-2025-32462 CVE-2025-32463 CVSS评分 CVE-2025-32462 (SUSE): 7.3 CVSS:3.1/AV:L/AC:H/AT:P/PR:L/UI:N/SU:C/CI:L/EV:A/H CVE-2025-32462 (SUSE): 7.0 CVSS:3.1/AV:L/AC:N/PR:L/UI:N/SU:C/CI:L/EV:A/H CVE-2025-32463 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/AT:P/PR:L/UI:N/TH:VA-H/SC:N/SIN:SAN CVE-2025-32463 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/SU:C/CI:L/EV:A/H 影响的产品 Basesystem Module 15-SP6 Basesystem Module 15-SP7 openSUSE Leap 15.6 SUSE Linux Enterprise Desktop 15 SP6 SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise Real Time 15 SP6 SUSE Linux Enterprise Real Time 15 SP7 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP7 描述 此更新修复了sudo中的两个漏洞： CVE-2025-32462：通过--host选项可能的本地权限提升（bsc#1245274） CVE-2025-32463：通过chown选项可能的本地权限提升（bsc#1245275） 补丁安装说明 使用YaST在线更新或"zypper patch"安装此SUSE安全更新。或者，可以运行针对产品的命令。 包列表 openSUSE Leap 15.6 - system-group-auto-1.9.15p5-1506000.3.9.1 - sudo-debuginfo-1.9.15p5-1506000.3.9.1 - sudo-devel-1.9.15p5-1506000.3.9.1 - sudo-policy-sudo-auth-self-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-debuginfo-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-debugsource-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-1.9.15p5-1506000.3.9.1 - sudo-debugsource-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-1.9.15p5-1506000.3.9.1 - sudo-1.9.15p5-1506000.3.9.1 Basesystem Module 15-SP6 - system-group-auto-1.9.15p5-1506000.3.9.1 - sudo-debuginfo-1.9.15p5-1506000.3.9.1 - sudo-devel-1.9.15p5-1506000.3.9.1 - sudo-policy-sudo-auth-self-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-debuginfo-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-debugsource-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-1.9.15p5-1506000.3.9.1 - sudo-debugsource-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-1.9.15p5-1506000.3.9.1 - sudo-1.9.15p5-1506000.3.9.1 Basesystem Module 15-SP7 - system-group-auto-1.9.15p5-1506000.3.9.1 - sudo-debuginfo-1.9.15p5-1506000.3.9.1 - sudo-devel-1.9.15p5-1506000.3.9.1 - sudo-policy-sudo-auth-self-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-debuginfo-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-debugsource-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-1.9.15p5-1506000.3.9.1 - sudo-debugsource-1.9.15p5-1506000.3.9.1 - sudo-plugin-python-1.9.15p5-1506000.3.9.1 - sudo-1.9.15p5-1506000.3.9.1 参考文献 https://www.suse.com/security/cve/CVE-2025-32462.html https://www.suse.com/security/cve/CVE-2025-32463.html https://bugzilla.suse.com/show_bug.cgi?id=1245274 https://bugzilla.suse.com/show_bug.cgi?id=1245275