The lasso library, which supports Liberty Alliance Single Sign-On standards such as SAML and SAML2, contains a type confusion vulnerability identified as CVE-2025-47151. This vulnerability could potentially impact the handling of SAML-based federations. Red Hat Product Security has rated this vulnerability as critical and has issued updated lasso packages for Red Hat Enterprise Linux 8 across various architectures. The advisory references a security update (RHSA-2025:21628) that addresses this issue by patching the affected packages.

The vulnerability involves type confusion in the lasso library, which could lead to unexpected behavior or security issues in applications relying on SAML-based single sign-on functionality. The exact impact details and exploitation scenarios are not provided in the advisory. The issue is rated critical by Red Hat, indicating a significant security risk if unpatched.

Red Hat has released updated lasso packages for Red Hat Enterprise Linux 8 that fix this vulnerability. Users should apply the security update RHSA-2025:21628 as detailed in the Red Hat advisory and article https://access.redhat.com/articles/11258. The update is available for multiple architectures including x86_64, s390x, ppc64le, and aarch64. Applying these official patches is the recommended remediation. No indication of alternative mitigations or workarounds is provided.