Red Hat Product Errata RHSA-2025:21403 - Security Advisory
Issued:
2025-11-17
Updated:
2025-11-17

RHSA-2025:21403 - Security Advisory

Synopsis

Critical: lasso security update

Type/Severity

Security Advisory: Critical

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for lasso is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

  • lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2412739 - CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
x86_64
lasso-2.7.0-11.el9_4.1.i686.rpm SHA-256: c14ab141d71b451276357424ef3e1d4a8fd2fe7e9ad224299831ffbd0bdea9bb
lasso-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: ef1612cc9ff74b21f58423a082b1cb5188c00e75e917d816f054a5f516e681ea
lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: c215ac274680e32c5e4a2f19f157414cba8eab5ff1a8603fb13d1ff060cbf761
lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 8f04690ed79272269e792d04899a7bb86a88f96fdf7331d759ec443b0592f3b5
lasso-debugsource-2.7.0-11.el9_4.1.i686.rpm SHA-256: 74af9505b8c0de8c23c687340531112c299d653388655c2dc449ecabca349982
lasso-debugsource-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 9b5c682e90ebda6b19c0b06f463eddb7e79528dcd535b2c110facf67555bf8de
perl-lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: aec99ae3ec38d809fd8f4a589c99455c1f6777e4c829e1d08c9c2f3b441e9d46
perl-lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: f20ed2fa08a3d6f513e7df8790b3c525756166b64b9d2c6b1ab21f03924e4617
python3-lasso-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: d2e176a71564bb5f6aa6dcfde9d57f636087e1a95096108478f3e3831f84d2dc
python3-lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: 29d49ef2cd5ac8615180142375c3540f06e88d2762d0bb2d95f186576ee6f2ce
python3-lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 29fd872440ab7e7284941ca2de996c3642f96b68ba9f8122c287f58a9a02e541

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
x86_64
lasso-2.7.0-11.el9_4.1.i686.rpm SHA-256: c14ab141d71b451276357424ef3e1d4a8fd2fe7e9ad224299831ffbd0bdea9bb
lasso-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: ef1612cc9ff74b21f58423a082b1cb5188c00e75e917d816f054a5f516e681ea
lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: c215ac274680e32c5e4a2f19f157414cba8eab5ff1a8603fb13d1ff060cbf761
lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 8f04690ed79272269e792d04899a7bb86a88f96fdf7331d759ec443b0592f3b5
lasso-debugsource-2.7.0-11.el9_4.1.i686.rpm SHA-256: 74af9505b8c0de8c23c687340531112c299d653388655c2dc449ecabca349982
lasso-debugsource-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 9b5c682e90ebda6b19c0b06f463eddb7e79528dcd535b2c110facf67555bf8de
perl-lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: aec99ae3ec38d809fd8f4a589c99455c1f6777e4c829e1d08c9c2f3b441e9d46
perl-lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: f20ed2fa08a3d6f513e7df8790b3c525756166b64b9d2c6b1ab21f03924e4617
python3-lasso-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: d2e176a71564bb5f6aa6dcfde9d57f636087e1a95096108478f3e3831f84d2dc
python3-lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: 29d49ef2cd5ac8615180142375c3540f06e88d2762d0bb2d95f186576ee6f2ce
python3-lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 29fd872440ab7e7284941ca2de996c3642f96b68ba9f8122c287f58a9a02e541

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
s390x
lasso-2.7.0-11.el9_4.1.s390x.rpm SHA-256: b9aeaf2627f791d68ddc723d792a7f405ad9b1c1d888565b27dc92579eafd92c
lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: c430bc22f00ea589bfd2cf7b00a0c9c4089b2df817fd2af7ae48367cbdf67fca
lasso-debugsource-2.7.0-11.el9_4.1.s390x.rpm SHA-256: 1c80a19ae2971e13153b0107a32345190223372617061b02f7c0c0c4e4e05f8f
perl-lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: bcc1944b391d66f4a6e43fa1af9318e6c4eb126890b0cd2960b7d66feeaf3e1e
python3-lasso-2.7.0-11.el9_4.1.s390x.rpm SHA-256: ec16c6dabd4a84291ec69cd3d6a467fcf1ac9e22158f4e8ea4bf0d504a0f09aa
python3-lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: 177f54b7486e875716230605e8997c1ffefdd23033ce980c22a27d2fbc107267

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
ppc64le
lasso-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: fcf4df8cb007aac9dc45a58febc2ee3c47c445a3a38b31b460aa1d778081c01b
lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: 9b83a61cdd20d9486947132c65c9703eb2e33c9cd933551cd227cc5256c5971f
lasso-debugsource-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: c50af68aadce7c23ac9772588719a4eac750d1ba20dd3d13831797a449afad4a
perl-lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: a874b401b274d6df9f20a05cbeb2517d12a5aaea1eddf5d2553d75a18ba90592
python3-lasso-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: 1f9a92b62978509a31fb8768431cd5b04278088d7fea215aaceab9e9705261b3
python3-lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: fcf7ae520c25af89dc40430cd8f42183fe45bae3f1d994e629d9cc01b67b6f36

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
aarch64
lasso-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 4b5c2f3ad16c1e5833c44c25a2f9914aeabe1fff4447c2b58bd463c163789dee
lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 6a61b040ecb0bb78087e6a9396469c9a3f3837c533b4cdd024daa84c08f274f5
lasso-debugsource-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: be9d98771d30776d582710c388861e6925e1a892e877bbc21adbfbef41054541
perl-lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 78c4fe86f166379117adba43aad69fff2b0972f5237091cd29b4486799184b07
python3-lasso-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: fd20f1554434843a7f731709c4245747d5fc95c5ea50bc9b6bad67ec4024a610
python3-lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 14fb70fedfb77b0380fd41e0c4669684dee766e81bfb84fbe75b3328a81a4291

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
ppc64le
lasso-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: fcf4df8cb007aac9dc45a58febc2ee3c47c445a3a38b31b460aa1d778081c01b
lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: 9b83a61cdd20d9486947132c65c9703eb2e33c9cd933551cd227cc5256c5971f
lasso-debugsource-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: c50af68aadce7c23ac9772588719a4eac750d1ba20dd3d13831797a449afad4a
perl-lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: a874b401b274d6df9f20a05cbeb2517d12a5aaea1eddf5d2553d75a18ba90592
python3-lasso-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: 1f9a92b62978509a31fb8768431cd5b04278088d7fea215aaceab9e9705261b3
python3-lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: fcf7ae520c25af89dc40430cd8f42183fe45bae3f1d994e629d9cc01b67b6f36

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
x86_64
lasso-2.7.0-11.el9_4.1.i686.rpm SHA-256: c14ab141d71b451276357424ef3e1d4a8fd2fe7e9ad224299831ffbd0bdea9bb
lasso-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: ef1612cc9ff74b21f58423a082b1cb5188c00e75e917d816f054a5f516e681ea
lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: c215ac274680e32c5e4a2f19f157414cba8eab5ff1a8603fb13d1ff060cbf761
lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 8f04690ed79272269e792d04899a7bb86a88f96fdf7331d759ec443b0592f3b5
lasso-debugsource-2.7.0-11.el9_4.1.i686.rpm SHA-256: 74af9505b8c0de8c23c687340531112c299d653388655c2dc449ecabca349982
lasso-debugsource-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 9b5c682e90ebda6b19c0b06f463eddb7e79528dcd535b2c110facf67555bf8de
perl-lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: aec99ae3ec38d809fd8f4a589c99455c1f6777e4c829e1d08c9c2f3b441e9d46
perl-lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: f20ed2fa08a3d6f513e7df8790b3c525756166b64b9d2c6b1ab21f03924e4617
python3-lasso-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: d2e176a71564bb5f6aa6dcfde9d57f636087e1a95096108478f3e3831f84d2dc
python3-lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: 29d49ef2cd5ac8615180142375c3540f06e88d2762d0bb2d95f186576ee6f2ce
python3-lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 29fd872440ab7e7284941ca2de996c3642f96b68ba9f8122c287f58a9a02e541

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4

SRPM
x86_64
lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: c215ac274680e32c5e4a2f19f157414cba8eab5ff1a8603fb13d1ff060cbf761
lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 8f04690ed79272269e792d04899a7bb86a88f96fdf7331d759ec443b0592f3b5
lasso-debugsource-2.7.0-11.el9_4.1.i686.rpm SHA-256: 74af9505b8c0de8c23c687340531112c299d653388655c2dc449ecabca349982
lasso-debugsource-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 9b5c682e90ebda6b19c0b06f463eddb7e79528dcd535b2c110facf67555bf8de
lasso-devel-2.7.0-11.el9_4.1.i686.rpm SHA-256: d3ff588708b367cad349950e306b57a7b99ad2e2dc6f958ec2fc7082bfa02b0f
lasso-devel-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 2b1994d71894728d691279ff4c11136c5dafdfa40059e99c49de0255e12759d5
perl-lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: aec99ae3ec38d809fd8f4a589c99455c1f6777e4c829e1d08c9c2f3b441e9d46
perl-lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: f20ed2fa08a3d6f513e7df8790b3c525756166b64b9d2c6b1ab21f03924e4617
python3-lasso-debuginfo-2.7.0-11.el9_4.1.i686.rpm SHA-256: 29d49ef2cd5ac8615180142375c3540f06e88d2762d0bb2d95f186576ee6f2ce
python3-lasso-debuginfo-2.7.0-11.el9_4.1.x86_64.rpm SHA-256: 29fd872440ab7e7284941ca2de996c3642f96b68ba9f8122c287f58a9a02e541

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4

SRPM
ppc64le
lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: 9b83a61cdd20d9486947132c65c9703eb2e33c9cd933551cd227cc5256c5971f
lasso-debugsource-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: c50af68aadce7c23ac9772588719a4eac750d1ba20dd3d13831797a449afad4a
lasso-devel-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: 5f44931c9fd98ca6cf4953be19affcc97a3a2c944cfe17f9faf193e67828de12
perl-lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: a874b401b274d6df9f20a05cbeb2517d12a5aaea1eddf5d2553d75a18ba90592
python3-lasso-debuginfo-2.7.0-11.el9_4.1.ppc64le.rpm SHA-256: fcf7ae520c25af89dc40430cd8f42183fe45bae3f1d994e629d9cc01b67b6f36

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4

SRPM
s390x
lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: c430bc22f00ea589bfd2cf7b00a0c9c4089b2df817fd2af7ae48367cbdf67fca
lasso-debugsource-2.7.0-11.el9_4.1.s390x.rpm SHA-256: 1c80a19ae2971e13153b0107a32345190223372617061b02f7c0c0c4e4e05f8f
lasso-devel-2.7.0-11.el9_4.1.s390x.rpm SHA-256: 635e6675bfc164ec423e360b0186d829c5c14cda3bf325f9bece4b8b294223e2
perl-lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: bcc1944b391d66f4a6e43fa1af9318e6c4eb126890b0cd2960b7d66feeaf3e1e
python3-lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: 177f54b7486e875716230605e8997c1ffefdd23033ce980c22a27d2fbc107267

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4

SRPM
aarch64
lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 6a61b040ecb0bb78087e6a9396469c9a3f3837c533b4cdd024daa84c08f274f5
lasso-debugsource-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: be9d98771d30776d582710c388861e6925e1a892e877bbc21adbfbef41054541
lasso-devel-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 1c3403cbaafbf884b4bd800ca67a5df59d728f1813cc9574d0bacc76e51d9ed3
perl-lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 78c4fe86f166379117adba43aad69fff2b0972f5237091cd29b4486799184b07
python3-lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 14fb70fedfb77b0380fd41e0c4669684dee766e81bfb84fbe75b3328a81a4291

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
aarch64
lasso-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 4b5c2f3ad16c1e5833c44c25a2f9914aeabe1fff4447c2b58bd463c163789dee
lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 6a61b040ecb0bb78087e6a9396469c9a3f3837c533b4cdd024daa84c08f274f5
lasso-debugsource-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: be9d98771d30776d582710c388861e6925e1a892e877bbc21adbfbef41054541
perl-lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 78c4fe86f166379117adba43aad69fff2b0972f5237091cd29b4486799184b07
python3-lasso-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: fd20f1554434843a7f731709c4245747d5fc95c5ea50bc9b6bad67ec4024a610
python3-lasso-debuginfo-2.7.0-11.el9_4.1.aarch64.rpm SHA-256: 14fb70fedfb77b0380fd41e0c4669684dee766e81bfb84fbe75b3328a81a4291

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
lasso-2.7.0-11.el9_4.1.src.rpm SHA-256: c858a04cf29fecf107685d16919ceaaa6550116dfba9e9466d86cd65f863d502
s390x
lasso-2.7.0-11.el9_4.1.s390x.rpm SHA-256: b9aeaf2627f791d68ddc723d792a7f405ad9b1c1d888565b27dc92579eafd92c
lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: c430bc22f00ea589bfd2cf7b00a0c9c4089b2df817fd2af7ae48367cbdf67fca
lasso-debugsource-2.7.0-11.el9_4.1.s390x.rpm SHA-256: 1c80a19ae2971e13153b0107a32345190223372617061b02f7c0c0c4e4e05f8f
perl-lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: bcc1944b391d66f4a6e43fa1af9318e6c4eb126890b0cd2960b7d66feeaf3e1e
python3-lasso-2.7.0-11.el9_4.1.s390x.rpm SHA-256: ec16c6dabd4a84291ec69cd3d6a467fcf1ac9e22158f4e8ea4bf0d504a0f09aa
python3-lasso-debuginfo-2.7.0-11.el9_4.1.s390x.rpm SHA-256: 177f54b7486e875716230605e8997c1ffefdd23033ce980c22a27d2fbc107267

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.