RHSA-2025:21452: Critical: lasso security update
Critical: lasso security update
Other sources
The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.Security Fix(es): lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/lassoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2 - Upgrade
Upgrade
redhat/lasso-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2 - Upgrade
Upgrade
redhat/lasso-debugsourceto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2 - Upgrade
Upgrade
redhat/perl-lasso-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2 - Upgrade
Upgrade
redhat/python3-lassoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2 - Upgrade
Upgrade
redhat/python3-lasso-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2 - Upgrade
Upgrade
redhat/lassoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2.aa - Upgrade
Upgrade
redhat/lasso-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2.aa - Upgrade
Upgrade
redhat/lasso-debugsourceto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2.aa - Upgrade
Upgrade
redhat/perl-lasso-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2.aa - Upgrade
Upgrade
redhat/python3-lassoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2.aa - Upgrade
Upgrade
redhat/python3-lasso-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2.aa - Upgrade
Upgrade
redhat/lasso-develto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2 - Upgrade
Upgrade
redhat/lasso-develto a version that resolves this vulnerability.Fixed in 2.7.0-11.el9_6.2.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:21452?
RHSA-2025:21452 is classified as a critical vulnerability.
How do I fix RHSA-2025:21452?
To fix RHSA-2025:21452, you should apply the latest security update provided by Red Hat for your affected version.
Which products are affected by RHSA-2025:21452?
RHSA-2025:21452 affects multiple Red Hat Enterprise Linux products and related components.
What is the nature of the vulnerability in RHSA-2025:21452?
The RHSA-2025:21452 vulnerability involves security flaws in the lasso component.
Is there a workaround for RHSA-2025:21452?
There are currently no recommended workarounds for the RHSA-2025:21452 vulnerability, so updating is advised.