Red Hat Product Errata RHSA-2025:21628 - Security Advisory
Issued:
2025-11-17
Updated:
2025-11-17

RHSA-2025:21628 - Security Advisory

Synopsis

Critical: lasso security update

Type/Severity

Security Advisory: Critical

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for lasso is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

  • lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2412739 - CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso

Red Hat Enterprise Linux for x86_64 8

SRPM
lasso-2.6.0-14.el8_10.src.rpm SHA-256: b82fe6e368b803bffef6db0ae573825bbd1a64593f8e11e6f093565496742e52
x86_64
java-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: d7e358e66c0504703ddb36ab1a6c198b0414cfd737f8453681f33233d9c28997
java-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 325f1271aa3b3f86008817f6676fc95d2dbb70a4f6d7e6a35d5f31acc3a2e43b
lasso-2.6.0-14.el8_10.i686.rpm SHA-256: a70a7afa1c16b142deecaf5f18f5bd886b3445c6bc0af8fa992c941691294484
lasso-2.6.0-14.el8_10.x86_64.rpm SHA-256: b59a91394bdd3091fec9df0a94d7ae966b6a75be0b8655b6d1f4bbafa27be4e3
lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: 75750d85b284275f851a1db5b6047dc72d506e8047ab7aeac1b231965335734d
lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 8a4e38027ebc6119ce88afbe3ef08289d61968ae6c85f1e7614fd4db72e98a86
lasso-debugsource-2.6.0-14.el8_10.i686.rpm SHA-256: 0ee2c03d3d91becd4201f721ca70140a9196f9f72a543d86bad28de70c0d94d8
lasso-debugsource-2.6.0-14.el8_10.x86_64.rpm SHA-256: 26f1f120bbb1452eab427ff84921f912a9f916d0a55f3fd2671d136c751f5fb7
perl-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: b243cea789ca4a63d695367becb2d8c57d8eed0afde5d1c886852c8c82d356fe
perl-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: d62751d4043289b946667fcae067964c589f1d8dc2dbc67ce03f8885f3d0f287
python3-lasso-2.6.0-14.el8_10.x86_64.rpm SHA-256: ae2bfea1a77c4979cb4e3e718afe715590384f29f3250714dc17f1887b61aec9
python3-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: f962ee05fff13080519e85656c3fa4befbd147892968add7b77a9e096d534e2d
python3-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 01d32717bdde7e448c0562bd820a0700cc68e293721653c1946cfd533f8ca6e5

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
lasso-2.6.0-14.el8_10.src.rpm SHA-256: b82fe6e368b803bffef6db0ae573825bbd1a64593f8e11e6f093565496742e52
s390x
java-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 41d5ec60a4b9adcedd7f8844095a6d1d53470ddc5d669901e5763b5e3ac433b7
lasso-2.6.0-14.el8_10.s390x.rpm SHA-256: 175d8584495ea087caf2b8535b736e13850e74ab7eb5b1b58160372e5f1bc079
lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 29fb9c1a88db94f7c10d45a7ca49a58cd1ac99fa89b6afbad2e6e1767ba65a66
lasso-debugsource-2.6.0-14.el8_10.s390x.rpm SHA-256: d25f0fd7d68907972a63e888432951a28c5755f54a31f6be8099034b5cbda8e9
perl-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 79576453a397b8a3af9387660f284a87c3c13bea7aaef421068a9a584b5fe81a
python3-lasso-2.6.0-14.el8_10.s390x.rpm SHA-256: 4edca545efa1cea9c9471c9cb0034a84e9ed0eefa3f4047bb8a22a8a5488b888
python3-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 322ac8f25b9e0e6e1c09b349167af971ebae8315f1811c1520fb327fc81c43ae

Red Hat Enterprise Linux for Power, little endian 8

SRPM
lasso-2.6.0-14.el8_10.src.rpm SHA-256: b82fe6e368b803bffef6db0ae573825bbd1a64593f8e11e6f093565496742e52
ppc64le
java-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: e04b46b790810443e4e92dfb56441826c073885e7c1e7cf6a1f76370c9de5932
lasso-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 981da764611ed61905ac040594e3bdc8c728cee9562c4b23b9a34cf296dee49f
lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 802adcd7c12d630f9d5a822904106de36e4d9db6767d2e2e49e20619c87f7419
lasso-debugsource-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 7008f9b6d5c039c81b9821a4e5e8a6b81635dfa32aeb3ac81d0eef100848adf5
perl-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 703e8ac07c4d5f479b3b9fef0194eabb4916042397c82cb466916bb84e2c1891
python3-lasso-2.6.0-14.el8_10.ppc64le.rpm SHA-256: c55c79f7557b0d97c564174235c3b26221eedc3921bcb51539aa5b3001c40e8b
python3-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 33df71ca131b560857968c5bb331da2f5f5b031328e8223a925e4c148396322b

Red Hat Enterprise Linux for ARM 64 8

SRPM
lasso-2.6.0-14.el8_10.src.rpm SHA-256: b82fe6e368b803bffef6db0ae573825bbd1a64593f8e11e6f093565496742e52
aarch64
java-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 80e2cb814c3ffe0e4cb71e8548b3d6c01bbec1e44c146d120c30b36b6f67563c
lasso-2.6.0-14.el8_10.aarch64.rpm SHA-256: 2bc95c715b3a24cb53dc161a75e52095f4d1fa265ab2e4e97c4bfb6cffab2326
lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 7163b97aef429c0f8f09f334b69dd276cecb42fac10ebc344a20f872fdfbf8fd
lasso-debugsource-2.6.0-14.el8_10.aarch64.rpm SHA-256: 525287e871b3ef4c77ea1d2e57a3f4ea70a5e126b40f08aabc5f0127f680ecd0
perl-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 9a726d6f0feca917bdf10fd17b864284f513665a8c9e6be514fb68231f4069cd
python3-lasso-2.6.0-14.el8_10.aarch64.rpm SHA-256: 726418603c6152845e4203cebf1a0e301dee65c397fc68315215cc93d897cc58
python3-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 67f6baa6e527b029fe83351af64e3337b37d3bc9a6f7accbaef89d35a66e1097

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
java-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: d7e358e66c0504703ddb36ab1a6c198b0414cfd737f8453681f33233d9c28997
java-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 325f1271aa3b3f86008817f6676fc95d2dbb70a4f6d7e6a35d5f31acc3a2e43b
lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: 75750d85b284275f851a1db5b6047dc72d506e8047ab7aeac1b231965335734d
lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 8a4e38027ebc6119ce88afbe3ef08289d61968ae6c85f1e7614fd4db72e98a86
lasso-debugsource-2.6.0-14.el8_10.i686.rpm SHA-256: 0ee2c03d3d91becd4201f721ca70140a9196f9f72a543d86bad28de70c0d94d8
lasso-debugsource-2.6.0-14.el8_10.x86_64.rpm SHA-256: 26f1f120bbb1452eab427ff84921f912a9f916d0a55f3fd2671d136c751f5fb7
lasso-devel-2.6.0-14.el8_10.i686.rpm SHA-256: c5a5494530a30dcb5b0b6fcc9eaad6a0bd12f703a4796881f7fa98717c3fee7c
lasso-devel-2.6.0-14.el8_10.x86_64.rpm SHA-256: ef8b2a449462ad27501a2b256027db6a876c3d82c93bbe1c4390d4683a2c9faa
perl-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: b243cea789ca4a63d695367becb2d8c57d8eed0afde5d1c886852c8c82d356fe
perl-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: d62751d4043289b946667fcae067964c589f1d8dc2dbc67ce03f8885f3d0f287
python3-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: f962ee05fff13080519e85656c3fa4befbd147892968add7b77a9e096d534e2d
python3-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 01d32717bdde7e448c0562bd820a0700cc68e293721653c1946cfd533f8ca6e5

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
java-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: e04b46b790810443e4e92dfb56441826c073885e7c1e7cf6a1f76370c9de5932
lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 802adcd7c12d630f9d5a822904106de36e4d9db6767d2e2e49e20619c87f7419
lasso-debugsource-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 7008f9b6d5c039c81b9821a4e5e8a6b81635dfa32aeb3ac81d0eef100848adf5
lasso-devel-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 0831b52be6f061849221f70b3d59d5326b9b7c950f0eae21bd317de6d856444c
perl-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 703e8ac07c4d5f479b3b9fef0194eabb4916042397c82cb466916bb84e2c1891
python3-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 33df71ca131b560857968c5bb331da2f5f5b031328e8223a925e4c148396322b

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
java-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 80e2cb814c3ffe0e4cb71e8548b3d6c01bbec1e44c146d120c30b36b6f67563c
lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 7163b97aef429c0f8f09f334b69dd276cecb42fac10ebc344a20f872fdfbf8fd
lasso-debugsource-2.6.0-14.el8_10.aarch64.rpm SHA-256: 525287e871b3ef4c77ea1d2e57a3f4ea70a5e126b40f08aabc5f0127f680ecd0
lasso-devel-2.6.0-14.el8_10.aarch64.rpm SHA-256: 1805bb9bc4291d050131f2a28dd03ae361f11e90cbc65f6ae52e4c2561dbb586
perl-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 9a726d6f0feca917bdf10fd17b864284f513665a8c9e6be514fb68231f4069cd
python3-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 67f6baa6e527b029fe83351af64e3337b37d3bc9a6f7accbaef89d35a66e1097

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
java-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 41d5ec60a4b9adcedd7f8844095a6d1d53470ddc5d669901e5763b5e3ac433b7
lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 29fb9c1a88db94f7c10d45a7ca49a58cd1ac99fa89b6afbad2e6e1767ba65a66
lasso-debugsource-2.6.0-14.el8_10.s390x.rpm SHA-256: d25f0fd7d68907972a63e888432951a28c5755f54a31f6be8099034b5cbda8e9
lasso-devel-2.6.0-14.el8_10.s390x.rpm SHA-256: ec3a25ca8f1d570685c51f6a8c33143c011cbe49d4e34f35c03f864ac66e8a85
perl-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 79576453a397b8a3af9387660f284a87c3c13bea7aaef421068a9a584b5fe81a
python3-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 322ac8f25b9e0e6e1c09b349167af971ebae8315f1811c1520fb327fc81c43ae

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
lasso-2.6.0-14.el8_10.src.rpm SHA-256: b82fe6e368b803bffef6db0ae573825bbd1a64593f8e11e6f093565496742e52
x86_64
java-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: d7e358e66c0504703ddb36ab1a6c198b0414cfd737f8453681f33233d9c28997
java-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 325f1271aa3b3f86008817f6676fc95d2dbb70a4f6d7e6a35d5f31acc3a2e43b
lasso-2.6.0-14.el8_10.i686.rpm SHA-256: a70a7afa1c16b142deecaf5f18f5bd886b3445c6bc0af8fa992c941691294484
lasso-2.6.0-14.el8_10.x86_64.rpm SHA-256: b59a91394bdd3091fec9df0a94d7ae966b6a75be0b8655b6d1f4bbafa27be4e3
lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: 75750d85b284275f851a1db5b6047dc72d506e8047ab7aeac1b231965335734d
lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 8a4e38027ebc6119ce88afbe3ef08289d61968ae6c85f1e7614fd4db72e98a86
lasso-debugsource-2.6.0-14.el8_10.i686.rpm SHA-256: 0ee2c03d3d91becd4201f721ca70140a9196f9f72a543d86bad28de70c0d94d8
lasso-debugsource-2.6.0-14.el8_10.x86_64.rpm SHA-256: 26f1f120bbb1452eab427ff84921f912a9f916d0a55f3fd2671d136c751f5fb7
perl-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: b243cea789ca4a63d695367becb2d8c57d8eed0afde5d1c886852c8c82d356fe
perl-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: d62751d4043289b946667fcae067964c589f1d8dc2dbc67ce03f8885f3d0f287
python3-lasso-2.6.0-14.el8_10.x86_64.rpm SHA-256: ae2bfea1a77c4979cb4e3e718afe715590384f29f3250714dc17f1887b61aec9
python3-lasso-debuginfo-2.6.0-14.el8_10.i686.rpm SHA-256: f962ee05fff13080519e85656c3fa4befbd147892968add7b77a9e096d534e2d
python3-lasso-debuginfo-2.6.0-14.el8_10.x86_64.rpm SHA-256: 01d32717bdde7e448c0562bd820a0700cc68e293721653c1946cfd533f8ca6e5

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
lasso-2.6.0-14.el8_10.src.rpm SHA-256: b82fe6e368b803bffef6db0ae573825bbd1a64593f8e11e6f093565496742e52
aarch64
java-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 80e2cb814c3ffe0e4cb71e8548b3d6c01bbec1e44c146d120c30b36b6f67563c
lasso-2.6.0-14.el8_10.aarch64.rpm SHA-256: 2bc95c715b3a24cb53dc161a75e52095f4d1fa265ab2e4e97c4bfb6cffab2326
lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 7163b97aef429c0f8f09f334b69dd276cecb42fac10ebc344a20f872fdfbf8fd
lasso-debugsource-2.6.0-14.el8_10.aarch64.rpm SHA-256: 525287e871b3ef4c77ea1d2e57a3f4ea70a5e126b40f08aabc5f0127f680ecd0
perl-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 9a726d6f0feca917bdf10fd17b864284f513665a8c9e6be514fb68231f4069cd
python3-lasso-2.6.0-14.el8_10.aarch64.rpm SHA-256: 726418603c6152845e4203cebf1a0e301dee65c397fc68315215cc93d897cc58
python3-lasso-debuginfo-2.6.0-14.el8_10.aarch64.rpm SHA-256: 67f6baa6e527b029fe83351af64e3337b37d3bc9a6f7accbaef89d35a66e1097

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
lasso-2.6.0-14.el8_10.src.rpm SHA-256: b82fe6e368b803bffef6db0ae573825bbd1a64593f8e11e6f093565496742e52
ppc64le
java-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: e04b46b790810443e4e92dfb56441826c073885e7c1e7cf6a1f76370c9de5932
lasso-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 981da764611ed61905ac040594e3bdc8c728cee9562c4b23b9a34cf296dee49f
lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 802adcd7c12d630f9d5a822904106de36e4d9db6767d2e2e49e20619c87f7419
lasso-debugsource-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 7008f9b6d5c039c81b9821a4e5e8a6b81635dfa32aeb3ac81d0eef100848adf5
perl-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 703e8ac07c4d5f479b3b9fef0194eabb4916042397c82cb466916bb84e2c1891
python3-lasso-2.6.0-14.el8_10.ppc64le.rpm SHA-256: c55c79f7557b0d97c564174235c3b26221eedc3921bcb51539aa5b3001c40e8b
python3-lasso-debuginfo-2.6.0-14.el8_10.ppc64le.rpm SHA-256: 33df71ca131b560857968c5bb331da2f5f5b031328e8223a925e4c148396322b

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
lasso-2.6.0-14.el8_10.src.rpm SHA-256: b82fe6e368b803bffef6db0ae573825bbd1a64593f8e11e6f093565496742e52
s390x
java-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 41d5ec60a4b9adcedd7f8844095a6d1d53470ddc5d669901e5763b5e3ac433b7
lasso-2.6.0-14.el8_10.s390x.rpm SHA-256: 175d8584495ea087caf2b8535b736e13850e74ab7eb5b1b58160372e5f1bc079
lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 29fb9c1a88db94f7c10d45a7ca49a58cd1ac99fa89b6afbad2e6e1767ba65a66
lasso-debugsource-2.6.0-14.el8_10.s390x.rpm SHA-256: d25f0fd7d68907972a63e888432951a28c5755f54a31f6be8099034b5cbda8e9
perl-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 79576453a397b8a3af9387660f284a87c3c13bea7aaef421068a9a584b5fe81a
python3-lasso-2.6.0-14.el8_10.s390x.rpm SHA-256: 4edca545efa1cea9c9471c9cb0034a84e9ed0eefa3f4047bb8a22a8a5488b888
python3-lasso-debuginfo-2.6.0-14.el8_10.s390x.rpm SHA-256: 322ac8f25b9e0e6e1c09b349167af971ebae8315f1811c1520fb327fc81c43ae

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.