< back to search

critical Security update for lasso

SUSE-SLE-Module-Server-Applications-15-SP7-2025-4068

This update for lasso fixes the following issues: - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093) - CVE-2025-47151: Fixed type confusion vulnerability in the lasso_node_impl_init_from_xml functionality (bsc#1253095)

Release Date

Nov 12 2025
References

Bugzilla: 1253092, 1253095, 1253093
CVEs: CVE-2025-47151, CVE-2025-46705, CVE-2025-46404
Type

security
Severity

critical

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.7 aarch64

Packages

lasso
Liberty Alliance Single Sign On

2.8.2-150600.3.5.1 lock src

liblasso3
Lasso runtime libraries

2.8.2-150600.3.5.1 lock rpm

Server Applications Module 15.7 ppc64le

Packages

lasso
Liberty Alliance Single Sign On

2.8.2-150600.3.5.1 lock src

liblasso3
Lasso runtime libraries

2.8.2-150600.3.5.1 lock rpm

Server Applications Module 15.7 s390x

Packages

lasso
Liberty Alliance Single Sign On

2.8.2-150600.3.5.1 lock src

liblasso3
Lasso runtime libraries

2.8.2-150600.3.5.1 lock rpm

Server Applications Module 15.7 x86_64

Packages

lasso
Liberty Alliance Single Sign On

2.8.2-150600.3.5.1 lock src

liblasso3
Lasso runtime libraries

2.8.2-150600.3.5.1 lock rpm