How to update sudo version in EKS Node Groups to fix CVE-2025-32463?

Hello, We are running an EKS cluster and discovered that our nodes have sudo version 1.9.15p5, which is vulnerable to CVE-2025-32463. According to the CVE details, this vulnerability affects sudo <= 1.9.17p1 and is fixed in version 1.9.17p2 and later. What we've tried:

Upgraded both the EKS control plane and node groups However, the sudo version remains at 1.9.15p5

Current environment:

Node Group AMI: amazon/amazon-eks-node-al2023-x86_64-standard-1.34-v20251007 EKS Version: 1.34 Operating System: Amazon Linux 2023

Questions:

Is there a newer AMI available with an updated sudo version that addresses this CVE? What is the recommended approach to patch this security vulnerability in managed node groups? Should we wait for an official AMI update, or do we need to create a custom AMI? Is there a timeline for when AWS will release an updated AMI with the patched sudo version?

Any guidance on best practices for addressing this CVE in EKS environments would be greatly appreciated. Thank you!