Read the docs
Red Hat Security Advisory

RHSA-2025:21401

lasso security update

Released 2025-11-17 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 1 record

TI-2025-29740 CVE-2025-47151 · GHSA-j9px-r24r-fm3p

Type confusion in Entr'ouvert Lasso

Priority MEDIUM 45

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01093 Published 2025-11-05 Partial fix CWE-843