Red Hat Security Advisory

RHSA-2025:21462

lasso security update

Released 2025-11-17 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) lasso-2.7.0-11.el9_7.3, python3-lasso-2.7.0-11.el9_7.3
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) lasso-devel-2.7.0-11.el9_7.3

TI-2025-29740 CVE-2025-47151 · GHSA-j9px-r24r-fm3p

MEDIUM 45

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01093 Published 2025-11-05 Partial fix CWE-843