critical Security update for lasso

SUSE-SLES-16.0-52

This update for lasso fixes the following issues: - CVE-2025-46404: specially crafted SAML response can lead to a denial of service (bsc#1253092). - CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service (bsc#1253093). - CVE-2025-47151: type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality can lead to an arbitrary code execution (bsc#1253095).

• Release Date
  Nov 25 2025
• References
  Bugzilla: 1253093, 1253095, 1253092
  CVEs: CVE-2025-46404, CVE-2025-46705, CVE-2025-47151
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  liblasso-devel
  Lasso development headers and documentation

  2.8.2-160000.3.1 lock rpm

  liblasso3
  Lasso runtime libraries

  2.8.2-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  liblasso-devel
  Lasso development headers and documentation

  2.8.2-160000.3.1 lock rpm

  liblasso3
  Lasso runtime libraries

  2.8.2-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  liblasso-devel
  Lasso development headers and documentation

  2.8.2-160000.3.1 lock rpm

  liblasso3
  Lasso runtime libraries

  2.8.2-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  liblasso-devel
  Lasso development headers and documentation

  2.8.2-160000.3.1 lock rpm

  liblasso3
  Lasso runtime libraries

  2.8.2-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  liblasso-devel
  Lasso development headers and documentation

  2.8.2-160000.3.1 lock rpm

  liblasso3
  Lasso runtime libraries

  2.8.2-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  liblasso-devel
  Lasso development headers and documentation

  2.8.2-160000.3.1 lock rpm

  liblasso3
  Lasso runtime libraries

  2.8.2-160000.3.1 lock rpm