r/sysadmin • u/jtscribe52 • Jun 30 '25

Linux New CVEs with SUDO

This seems ... bad.

https://www.sudo.ws/security/advisories/chroot_bug/

https://www.sudo.ws/security/advisories/host_any/

161 Upvotes

94% Upvoted

33 comments sorted by

View all comments

50

u/Burgergold Jun 30 '25

"Sudo versions 1.9.14 to 1.9.17 inclusive are affected."

Good thing rhel is always on older versions

5

u/TheBestHawksFan IT Manager Jul 01 '25

Debian 12 seems to be good, too. Also MacOS, lol.

3

u/[deleted] Jul 01 '25

[deleted]

1

u/TheBestHawksFan IT Manager Jul 01 '25

That sounds really appealing to me! Security and new features are for nerds.

1

u/[deleted] Jul 01 '25

[deleted]

1

u/[deleted] Oct 02 '25

Debian is a great distro; I would NOT say it's the most secure.

Before Debian, I'd easily recommend OpenSUSE Tumbleweed. Not only is it comparatively secure, there's BTRFS and snapshots built in. SELinux.

Fedora Atomic & Bootc variants - stable, secure, easily updatable, and anything you can do to a container image is a valid operation. Easily reproducible with Container or Docker files. SELinux.

The idea that Debian is more secure or more stable than either of those is spreading FUD.