SUSE-SU-2025:4090-1
Security update for lasso
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for lasso fixes the following issues: - CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso (bsc#1253094) - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093) - CVE-2025-47151: Fixed type confusion vulnerability in the lasso_node_impl_init_from_xml functionality (bsc#1253095)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.3 | liblasso-devel, liblasso3, python3-lasso | 2.6.1-150200.24.1 |
| SUSE Linux Enterprise 15.4 | liblasso3 | 2.6.1-150200.24.1 |
| SUSE Linux Enterprise 15.5 | liblasso3 | 2.6.1-150200.24.1 |
Mostrar las 5 entradas de 3 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.3 | liblasso-devel | 2.6.1-150200.24.1 |
| SUSE Linux Enterprise 15.3 | liblasso3 | 2.6.1-150200.24.1 |
| SUSE Linux Enterprise 15.3 | python3-lasso | 2.6.1-150200.24.1 |
| SUSE Linux Enterprise 15.4 | liblasso3 | 2.6.1-150200.24.1 |
| SUSE Linux Enterprise 15.5 | liblasso3 | 2.6.1-150200.24.1 |
Referencias
- https://bugzilla.suse.com/1253092
- https://bugzilla.suse.com/1253093
- https://bugzilla.suse.com/1253094
- https://bugzilla.suse.com/1253095
- https://lists.suse.com/pipermail/sle-security-updates/2025-November/023277.html
- https://www.suse.com/security/cve/CVE-2025-46404/
- https://www.suse.com/security/cve/CVE-2025-46705/
- https://www.suse.com/security/cve/CVE-2025-46784/