Red Hat Product Errata RHSA-2025:21452 - Security Advisory
Issued:
2025-11-17
Updated:
2025-11-17

RHSA-2025:21452 - Security Advisory

Synopsis

Critical: lasso security update

Type/Severity

Security Advisory: Critical

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for lasso is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

  • lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x

Fixes

  • BZ - 2412739 - CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
x86_64
lasso-2.7.0-11.el9_6.2.i686.rpm SHA-256: 0f9387eed35a7223fc92a85ce74cd7c246ca11cf850551164024d819d8f15284
lasso-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 1a9299a378d26647a5530e114287e85450eb72a55f989fb0cfe77544e1284252
lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: e3ffe1fe698b692a3f680aae9e5e86c9cbd8e8d606d1c8ada8e7cea8fec1a067
lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 887bc35aa92e4639f93edd64183939c1cd3a3af6cba0a95ae8f1220e16bba6d1
lasso-debugsource-2.7.0-11.el9_6.2.i686.rpm SHA-256: 6501f17cf3b98645a4e3aeca3a44b47cf4c8ff09bbd1201924dd1fc64d72d6be
lasso-debugsource-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 0bb0f0e977b621f389341ac2c939481e891f77b36a83d6e024d39e59bc59fe3e
perl-lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: 857b3c09506ecf38c35ff0ee903118fba6fca5dc40b2f036a052a1fbc804c452
perl-lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 2267bef4c11f0456654ad8e0e70bcc28e397e10cbbc4eede30b8bdd8b654a4fb
python3-lasso-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 40fd757af777f60fbc056f2892448ace53afa644942db052357c255ac87e92c5
python3-lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: 1791908cb894600851a11ee0c91df52f86915166be497710fe1fc9aaba30ac51
python3-lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: b26ca89da76e0bf2ce4a7652ad222b2d7ae09e667e456355b0b9d3348ddaf8bd

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
x86_64
lasso-2.7.0-11.el9_6.2.i686.rpm SHA-256: 0f9387eed35a7223fc92a85ce74cd7c246ca11cf850551164024d819d8f15284
lasso-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 1a9299a378d26647a5530e114287e85450eb72a55f989fb0cfe77544e1284252
lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: e3ffe1fe698b692a3f680aae9e5e86c9cbd8e8d606d1c8ada8e7cea8fec1a067
lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 887bc35aa92e4639f93edd64183939c1cd3a3af6cba0a95ae8f1220e16bba6d1
lasso-debugsource-2.7.0-11.el9_6.2.i686.rpm SHA-256: 6501f17cf3b98645a4e3aeca3a44b47cf4c8ff09bbd1201924dd1fc64d72d6be
lasso-debugsource-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 0bb0f0e977b621f389341ac2c939481e891f77b36a83d6e024d39e59bc59fe3e
perl-lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: 857b3c09506ecf38c35ff0ee903118fba6fca5dc40b2f036a052a1fbc804c452
perl-lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 2267bef4c11f0456654ad8e0e70bcc28e397e10cbbc4eede30b8bdd8b654a4fb
python3-lasso-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 40fd757af777f60fbc056f2892448ace53afa644942db052357c255ac87e92c5
python3-lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: 1791908cb894600851a11ee0c91df52f86915166be497710fe1fc9aaba30ac51
python3-lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: b26ca89da76e0bf2ce4a7652ad222b2d7ae09e667e456355b0b9d3348ddaf8bd

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
s390x
lasso-2.7.0-11.el9_6.2.s390x.rpm SHA-256: c3e7fca4676810d26f4716937508f2c8e98f1c08f58e5bb8dce18fe232413938
lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 40cadd78d188ded29d8eb1b7db81fdd1e5667ad4310413a9aa4f70e0b55d64a5
lasso-debugsource-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 8844f6640f8ac6a3bdc428f451a720286688cf459e472f5e6d234501c941949b
perl-lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 5aad64862ebc8f2162b02432aadeb63c5db61878e96874e6cc3eb97477d71e7b
python3-lasso-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 1daf84a07ebb9366817c4bae90f8c72018eeea4084849d6ff87a965eb8489a9e
python3-lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: af9bedd0644c195162f29a21b504a63447692c2d0076f07be6c9672073c8cf40

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
ppc64le
lasso-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 3b5401e6f7226fdccd50ed6b336352e35aea745f8b8392eae645b34fb174f33d
lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 559af2813e5631332c378a11158055bc588c7b769811f0e425e01e9231991ac8
lasso-debugsource-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 04611e8ec01f21c33bbefca5bfbe3f54e03f9e316c6cd058334a363e9f9f158e
perl-lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 22bb157c1e6c1dc9fb121a3e45e84c9c5f2c0a6f36f3e3d39b26292ee1d3af2d
python3-lasso-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: d62fb4590fbb8cb531a747010eebc6e098b718252e1146dc2e4e9d565d6d1bc1
python3-lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 329b11420fab6c3edb626ec8e4cf21a84d3c0fa0616655cb9b0a539e837c03bd

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
aarch64
lasso-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: b9e25e432d38c7aa601304ecb0d88091870ec6f4a8eca52a81e545af2322d170
lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: 733accc4789f7b0a5a393196ab55ae64fd258da3b8ed9dedcd605414b004b8d6
lasso-debugsource-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: bd74ce2ac4773f14c3dbe7de6fd80a71337abc988e6409e9d6ccafd91ed0da43
perl-lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: aeacf4873eca5220a5aa0c8d24918d1c02f413711806143b00f3168d6a088408
python3-lasso-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: 2c368a72824ccf9c3fc25cfeff67998ae854f74af2a24890d347e40320f87616
python3-lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: e5f8d5a976a3af6ae3905039811055bcc43e10e7893b79b95b1698e65f3c4712

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
ppc64le
lasso-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 3b5401e6f7226fdccd50ed6b336352e35aea745f8b8392eae645b34fb174f33d
lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 559af2813e5631332c378a11158055bc588c7b769811f0e425e01e9231991ac8
lasso-debugsource-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 04611e8ec01f21c33bbefca5bfbe3f54e03f9e316c6cd058334a363e9f9f158e
perl-lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 22bb157c1e6c1dc9fb121a3e45e84c9c5f2c0a6f36f3e3d39b26292ee1d3af2d
python3-lasso-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: d62fb4590fbb8cb531a747010eebc6e098b718252e1146dc2e4e9d565d6d1bc1
python3-lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 329b11420fab6c3edb626ec8e4cf21a84d3c0fa0616655cb9b0a539e837c03bd

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
x86_64
lasso-2.7.0-11.el9_6.2.i686.rpm SHA-256: 0f9387eed35a7223fc92a85ce74cd7c246ca11cf850551164024d819d8f15284
lasso-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 1a9299a378d26647a5530e114287e85450eb72a55f989fb0cfe77544e1284252
lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: e3ffe1fe698b692a3f680aae9e5e86c9cbd8e8d606d1c8ada8e7cea8fec1a067
lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 887bc35aa92e4639f93edd64183939c1cd3a3af6cba0a95ae8f1220e16bba6d1
lasso-debugsource-2.7.0-11.el9_6.2.i686.rpm SHA-256: 6501f17cf3b98645a4e3aeca3a44b47cf4c8ff09bbd1201924dd1fc64d72d6be
lasso-debugsource-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 0bb0f0e977b621f389341ac2c939481e891f77b36a83d6e024d39e59bc59fe3e
perl-lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: 857b3c09506ecf38c35ff0ee903118fba6fca5dc40b2f036a052a1fbc804c452
perl-lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 2267bef4c11f0456654ad8e0e70bcc28e397e10cbbc4eede30b8bdd8b654a4fb
python3-lasso-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 40fd757af777f60fbc056f2892448ace53afa644942db052357c255ac87e92c5
python3-lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: 1791908cb894600851a11ee0c91df52f86915166be497710fe1fc9aaba30ac51
python3-lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: b26ca89da76e0bf2ce4a7652ad222b2d7ae09e667e456355b0b9d3348ddaf8bd

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6

SRPM
x86_64
lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: e3ffe1fe698b692a3f680aae9e5e86c9cbd8e8d606d1c8ada8e7cea8fec1a067
lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 887bc35aa92e4639f93edd64183939c1cd3a3af6cba0a95ae8f1220e16bba6d1
lasso-debugsource-2.7.0-11.el9_6.2.i686.rpm SHA-256: 6501f17cf3b98645a4e3aeca3a44b47cf4c8ff09bbd1201924dd1fc64d72d6be
lasso-debugsource-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 0bb0f0e977b621f389341ac2c939481e891f77b36a83d6e024d39e59bc59fe3e
lasso-devel-2.7.0-11.el9_6.2.i686.rpm SHA-256: 29a8a72442f090ff7ffbd27d6007e8ed7330f20b5797e9ba6a4c09f10323e74c
lasso-devel-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 33332d077eddf506271a285e41f82665c6ae1b083b42b243c3feadd3a58aab29
perl-lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: 857b3c09506ecf38c35ff0ee903118fba6fca5dc40b2f036a052a1fbc804c452
perl-lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: 2267bef4c11f0456654ad8e0e70bcc28e397e10cbbc4eede30b8bdd8b654a4fb
python3-lasso-debuginfo-2.7.0-11.el9_6.2.i686.rpm SHA-256: 1791908cb894600851a11ee0c91df52f86915166be497710fe1fc9aaba30ac51
python3-lasso-debuginfo-2.7.0-11.el9_6.2.x86_64.rpm SHA-256: b26ca89da76e0bf2ce4a7652ad222b2d7ae09e667e456355b0b9d3348ddaf8bd

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6

SRPM
ppc64le
lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 559af2813e5631332c378a11158055bc588c7b769811f0e425e01e9231991ac8
lasso-debugsource-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 04611e8ec01f21c33bbefca5bfbe3f54e03f9e316c6cd058334a363e9f9f158e
lasso-devel-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 68912197c8647c172736786a95fa7a5a4511bfea4cfb0f4ef5dfbeadd4f287f7
perl-lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 22bb157c1e6c1dc9fb121a3e45e84c9c5f2c0a6f36f3e3d39b26292ee1d3af2d
python3-lasso-debuginfo-2.7.0-11.el9_6.2.ppc64le.rpm SHA-256: 329b11420fab6c3edb626ec8e4cf21a84d3c0fa0616655cb9b0a539e837c03bd

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6

SRPM
s390x
lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 40cadd78d188ded29d8eb1b7db81fdd1e5667ad4310413a9aa4f70e0b55d64a5
lasso-debugsource-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 8844f6640f8ac6a3bdc428f451a720286688cf459e472f5e6d234501c941949b
lasso-devel-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 1460befad0803c6368daf547fbffd28a9344048574f85855a065efc2cbd277eb
perl-lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 5aad64862ebc8f2162b02432aadeb63c5db61878e96874e6cc3eb97477d71e7b
python3-lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: af9bedd0644c195162f29a21b504a63447692c2d0076f07be6c9672073c8cf40

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6

SRPM
aarch64
lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: 733accc4789f7b0a5a393196ab55ae64fd258da3b8ed9dedcd605414b004b8d6
lasso-debugsource-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: bd74ce2ac4773f14c3dbe7de6fd80a71337abc988e6409e9d6ccafd91ed0da43
lasso-devel-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: 1736c584b13f26e08eace6bf3f3f67274bc42827d9b6e62d78501695d78c6bfe
perl-lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: aeacf4873eca5220a5aa0c8d24918d1c02f413711806143b00f3168d6a088408
python3-lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: e5f8d5a976a3af6ae3905039811055bcc43e10e7893b79b95b1698e65f3c4712

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
aarch64
lasso-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: b9e25e432d38c7aa601304ecb0d88091870ec6f4a8eca52a81e545af2322d170
lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: 733accc4789f7b0a5a393196ab55ae64fd258da3b8ed9dedcd605414b004b8d6
lasso-debugsource-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: bd74ce2ac4773f14c3dbe7de6fd80a71337abc988e6409e9d6ccafd91ed0da43
perl-lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: aeacf4873eca5220a5aa0c8d24918d1c02f413711806143b00f3168d6a088408
python3-lasso-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: 2c368a72824ccf9c3fc25cfeff67998ae854f74af2a24890d347e40320f87616
python3-lasso-debuginfo-2.7.0-11.el9_6.2.aarch64.rpm SHA-256: e5f8d5a976a3af6ae3905039811055bcc43e10e7893b79b95b1698e65f3c4712

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
lasso-2.7.0-11.el9_6.2.src.rpm SHA-256: bdc19dbae9f150cef79b2836184cc7f9c154b08137ca0ed3f9f9bca149fb98ea
s390x
lasso-2.7.0-11.el9_6.2.s390x.rpm SHA-256: c3e7fca4676810d26f4716937508f2c8e98f1c08f58e5bb8dce18fe232413938
lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 40cadd78d188ded29d8eb1b7db81fdd1e5667ad4310413a9aa4f70e0b55d64a5
lasso-debugsource-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 8844f6640f8ac6a3bdc428f451a720286688cf459e472f5e6d234501c941949b
perl-lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 5aad64862ebc8f2162b02432aadeb63c5db61878e96874e6cc3eb97477d71e7b
python3-lasso-2.7.0-11.el9_6.2.s390x.rpm SHA-256: 1daf84a07ebb9366817c4bae90f8c72018eeea4084849d6ff87a965eb8489a9e
python3-lasso-debuginfo-2.7.0-11.el9_6.2.s390x.rpm SHA-256: af9bedd0644c195162f29a21b504a63447692c2d0076f07be6c9672073c8cf40

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.