critical Security update for lasso

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-4068

This update for lasso fixes the following issues: - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093) - CVE-2025-47151: Fixed type confusion vulnerability in the lasso_node_impl_init_from_xml functionality (bsc#1253095)

• Release Date
  Nov 12 2025
• References
  Bugzilla: 1253092, 1253095, 1253093
  CVEs: CVE-2025-47151, CVE-2025-46705, CVE-2025-46404
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Package Hub 15.7 aarch64

• Packages
  lasso
  Liberty Alliance Single Sign On

  2.8.2-150600.3.5.1 lock src

  liblasso-devel
  Lasso development headers and documentation

  2.8.2-150600.3.5.1 lock rpm

  python3-lasso
  Liberty Alliance Single Sign On (lasso) Python bindings

  2.8.2-150600.3.5.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  lasso
  Liberty Alliance Single Sign On

  2.8.2-150600.3.5.1 lock src

  liblasso-devel
  Lasso development headers and documentation

  2.8.2-150600.3.5.1 lock rpm

  python3-lasso
  Liberty Alliance Single Sign On (lasso) Python bindings

  2.8.2-150600.3.5.1 lock rpm

SUSE Package Hub 15.7 s390x

• Packages
  lasso
  Liberty Alliance Single Sign On

  2.8.2-150600.3.5.1 lock src

  liblasso-devel
  Lasso development headers and documentation

  2.8.2-150600.3.5.1 lock rpm

  python3-lasso
  Liberty Alliance Single Sign On (lasso) Python bindings

  2.8.2-150600.3.5.1 lock rpm

SUSE Package Hub 15.7 x86_64

• Packages
  lasso
  Liberty Alliance Single Sign On

  2.8.2-150600.3.5.1 lock src

  liblasso-devel
  Lasso development headers and documentation

  2.8.2-150600.3.5.1 lock rpm

  python3-lasso
  Liberty Alliance Single Sign On (lasso) Python bindings

  2.8.2-150600.3.5.1 lock rpm