Back Linuxsecurity openSUSE: Critical Type Confusion & Denial of Service Issues 2025:4068
This update for lasso fixes the following issues: * CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) * CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093) * CVE-2025-47151: Fixed type confusion vulnerability in the lasso_node_impl_init_from_xml functionality (bsc#1253095)
## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-4068=1 openSUSE-SLE-15.6-2025-4068=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-4068=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-4068=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-4068=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2025-4068=1
## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-4068=1 openSUSE-SLE-15.6-2025-4068=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-4068=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-4068=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-4068=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2025-4068=1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * lasso-debuginfo-2.8.2-150600.3.5.1 * python3-lasso-debuginfo-2.8.2-150600.3.5.1 * liblasso-devel-2.8.2-150600.3.5.1 * liblasso3-2.8.2-150600.3.5.1 * python3-lasso-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * liblasso3-debuginfo-2.8.2-150600.3.5.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * lasso-debuginfo-2.8.2-150600.3.5.1 * python3-lasso-debuginfo-2.8.2-150600.3.5.1 * liblasso-devel-2.8.2-150600.3.5.1 * python3-lasso-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * lasso-debuginfo-2.8.2-150600.3.5.1 * python3-lasso-debuginfo-2.8.2-150600.3.5.1 * liblasso-devel-2.8.2-150600.3.5.1 * python3-lasso-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * liblasso3-2.8.2-150600.3.5.1 * lasso-debuginfo-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * liblasso3-debuginfo-2.8.2-150600.3.5.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * liblasso3-2.8.2-150600.3.5.1 * lasso-debuginfo-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * liblasso3-debuginfo-2.8.2-150600.3.5.1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * lasso-debuginfo-2.8.2-150600.3.5.1 * python3-lasso-debuginfo-2.8.2-150600.3.5.1 * liblasso-devel-2.8.2-150600.3.5.1 * liblasso3-2.8.2-150600.3.5.1 * python3-lasso-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * liblasso3-debuginfo-2.8.2-150600.3.5.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * lasso-debuginfo-2.8.2-150600.3.5.1 * python3-lasso-debuginfo-2.8.2-150600.3.5.1 * liblasso-devel-2.8.2-150600.3.5.1 * python3-lasso-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * lasso-debuginfo-2.8.2-150600.3.5.1 * python3-lasso-debuginfo-2.8.2-150600.3.5.1 * liblasso-devel-2.8.2-150600.3.5.1 * python3-lasso-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * liblasso3-2.8.2-150600.3.5.1 * lasso-debuginfo-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * liblasso3-debuginfo-2.8.2-150600.3.5.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * liblasso3-2.8.2-150600.3.5.1 * lasso-debuginfo-2.8.2-150600.3.5.1 * lasso-debugsource-2.8.2-150600.3.5.1 * liblasso3-debuginfo-2.8.2-150600.3.5.1
* bsc#1253092 * bsc#1253093 * bsc#1253095 ## References: * * * * * *
* bsc#1253092 * bsc#1253093 * bsc#1253095 ## References: * * * * * *
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
