Updated Sudo packages are available for Debian GNU/Linux 8 (Jessie), 9 (Stretch), and 10 (Buster) Extended LTS:

ELA-1476-1 sudo security update

ELA-1476-1 sudo security update

Package : sudo
Version : 1.8.10p3-1+deb8u10 (jessie), 1.8.19p1-2.1+deb9u7 (stretch), 1.8.27-1+deb10u7 (buster)

Related CVEs :
CVE-2025-32462

Rich Mirch discovered that sudo, a program designed to provide limited
super user privileges to specific users, does not correctly handle the
host (-h or –host) option. Due to a bug the host option was not
restricted to listing privileges only and could be used when running a
command via sudo or editing a file with sudoedit. Depending on the rules
present in the sudoers file the flaw might allow a local privilege
escalation attack.

ELA-1476-1 sudo security update