Critical ELSA-2025-21462 1 CVE

Critical: lasso security update (Oracle Linux 9)

Published Nov 25, 2025 · Updated Nov 25, 2025

Ecosystem: Oracle Linux

Summary

[ - 2.7.0-11.3]
- Fix CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso
Resolves: RHEL-126684

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	lasso	0:2.7.0-11.el9_7.3
Oracle Linux · 9	lasso-devel	0:2.7.0-11.el9_7.3
Oracle Linux · 9	python3-lasso	0:2.7.0-11.el9_7.3

Vulnerabilities 1

Critical 9.8

CVE-2025-47151

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1…

Entr'ouvert Lasso lasso lasso Debian Ubuntu Azure Linux

Nov 5, 2025