Critical ELSA-2025-21404 1 CVE

Critical: lasso security update (Oracle Linux 7)

Published Dec 10, 2025 · Updated Dec 10, 2025

Ecosystem: Oracle Linux

Summary

[2.5.1-8.0.1]
- Fixes CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso [Orabug: 38658691]

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	lasso	0:2.5.1-8.0.1.el7_9
Oracle Linux · 7	lasso-devel	0:2.5.1-8.0.1.el7_9
Oracle Linux · 7	lasso-python	0:2.5.1-8.0.1.el7_9

Vulnerabilities 1

Critical 9.8

CVE-2025-47151

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1…

Entr'ouvert Lasso lasso lasso Debian Ubuntu Azure Linux

Nov 5, 2025