--- title: "Security digest: June 30, 2025" url: https://erroneo.us/security/2025-06-30/ description: "June 30, 2025 vulnerability digest: 1 brief (sudo --chroot Local Root Escalation…); 1 CISA KEV addition (Citrix); 1 critical advisory (Maven). What to patch…" type: security-digest-day section: "Security Digest" date_published: 2025-06-30 date_modified: 2026-10-21 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: June 30, 2025 1 editorial brief, 1 known exploited (cisa kev) addition and 1 critical advisory. ## Take stock - Check exposure: sudo --chroot Local Root Escalation (CVE-2025-32463) . Admins of Linux hosts where untrusted or semi-trusted users, compromised services or CI jobs can get a local shell, if sudo is 1.9.14 through 1.9.17 without the distro patch. - Do you run any of these? Citrix NetScaler ADC and Gateway. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-07-21. - Maven: 1 critical advisory ( org.conductoross:conductor-core ). Check with mvn dependency:tree -Dincludes=: . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Check exposure** [sudo --chroot Local Root Escalation (CVE-2025-32463)](https://erroneo.us/security/briefs/sudo-chroot-privilege-escalation-cve-2025-32463/index.md): Distros patched this in mid-2025 and it is now known-exploited; any multi-user or shared Linux host still on sudo 1.9.14-1.9.17 without the vendor fix hands root to every local account. ## Known exploited (CISA KEV) - [CVE-2025-6543](https://erroneo.us/security/cve/CVE-2025-6543/index.md) Citrix NetScaler ADC and Gateway: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability (CISA due 2025-07-21) ## Critical advisories - [CVE-2025-26074](https://erroneo.us/security/cve/CVE-2025-26074/index.md) Conductor vulnerable to OS command injection through unrestricted access to Java classes — Maven org.conductoross:conductor-core < 3.21.13 → 3.21.13 --- Source page: https://erroneo.us/security/2025-06-30/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt