OESA-2025-1137

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1137
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1137.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2025-1137
Upstream
Published
2025-02-21T13:35:26Z
Modified
2025-09-03T06:18:28.352037Z
Summary
jss security update
Details

JSS offers a implementation for java-based applications to use native NSS.

Security Fix(es):

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).(CVE-2022-4132)

Database specific
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP4

jss

Package

Name
jss
Purl
pkg:rpm/openEuler/jss&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.9.3-2.oe2003sp4

Ecosystem specific

{
    "src": [
        "jss-4.9.3-2.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "jss-4.9.3-2.oe2003sp4.aarch64.rpm",
        "jss-debuginfo-4.9.3-2.oe2003sp4.aarch64.rpm",
        "jss-debugsource-4.9.3-2.oe2003sp4.aarch64.rpm",
        "jss-help-4.9.3-2.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "jss-4.9.3-2.oe2003sp4.x86_64.rpm",
        "jss-debuginfo-4.9.3-2.oe2003sp4.x86_64.rpm",
        "jss-debugsource-4.9.3-2.oe2003sp4.x86_64.rpm",
        "jss-help-4.9.3-2.oe2003sp4.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP3

jss

Package

Name
jss
Purl
pkg:rpm/openEuler/jss&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.1.0-3.oe2203sp3

Ecosystem specific

{
    "src": [
        "jss-5.1.0-3.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "jss-5.1.0-3.oe2203sp3.aarch64.rpm",
        "jss-debuginfo-5.1.0-3.oe2203sp3.aarch64.rpm",
        "jss-debugsource-5.1.0-3.oe2203sp3.aarch64.rpm",
        "jss-help-5.1.0-3.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "jss-5.1.0-3.oe2203sp3.x86_64.rpm",
        "jss-debuginfo-5.1.0-3.oe2203sp3.x86_64.rpm",
        "jss-debugsource-5.1.0-3.oe2203sp3.x86_64.rpm",
        "jss-help-5.1.0-3.oe2203sp3.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP4

jss

Package

Name
jss
Purl
pkg:rpm/openEuler/jss&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.1.0-3.oe2203sp4

Ecosystem specific

{
    "src": [
        "jss-5.1.0-3.oe2203sp4.src.rpm"
    ],
    "aarch64": [
        "jss-5.1.0-3.oe2203sp4.aarch64.rpm",
        "jss-debuginfo-5.1.0-3.oe2203sp4.aarch64.rpm",
        "jss-debugsource-5.1.0-3.oe2203sp4.aarch64.rpm",
        "jss-help-5.1.0-3.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "jss-5.1.0-3.oe2203sp4.x86_64.rpm",
        "jss-debuginfo-5.1.0-3.oe2203sp4.x86_64.rpm",
        "jss-debugsource-5.1.0-3.oe2203sp4.x86_64.rpm",
        "jss-help-5.1.0-3.oe2203sp4.x86_64.rpm"
    ]
}

openEuler:24.03-LTS

jss

Package

Name
jss
Purl
pkg:rpm/openEuler/jss&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.2-2.oe2403sp1

Ecosystem specific

{
    "src": [
        "jss-5.4.2-2.oe2403.src.rpm",
        "jss-5.4.2-2.oe2403sp1.src.rpm"
    ],
    "aarch64": [
        "jss-5.4.2-2.oe2403.aarch64.rpm",
        "jss-debuginfo-5.4.2-2.oe2403.aarch64.rpm",
        "jss-debugsource-5.4.2-2.oe2403.aarch64.rpm",
        "jss-help-5.4.2-2.oe2403.aarch64.rpm",
        "jss-5.4.2-2.oe2403sp1.aarch64.rpm",
        "jss-debuginfo-5.4.2-2.oe2403sp1.aarch64.rpm",
        "jss-debugsource-5.4.2-2.oe2403sp1.aarch64.rpm",
        "jss-help-5.4.2-2.oe2403sp1.aarch64.rpm"
    ],
    "x86_64": [
        "jss-5.4.2-2.oe2403.x86_64.rpm",
        "jss-debuginfo-5.4.2-2.oe2403.x86_64.rpm",
        "jss-debugsource-5.4.2-2.oe2403.x86_64.rpm",
        "jss-help-5.4.2-2.oe2403.x86_64.rpm",
        "jss-5.4.2-2.oe2403sp1.x86_64.rpm",
        "jss-debuginfo-5.4.2-2.oe2403sp1.x86_64.rpm",
        "jss-debugsource-5.4.2-2.oe2403sp1.x86_64.rpm",
        "jss-help-5.4.2-2.oe2403sp1.x86_64.rpm"
    ]
}

openEuler:24.03-LTS-SP1

jss

Package

Name
jss
Purl
pkg:rpm/openEuler/jss&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.2-2.oe2403sp1

Ecosystem specific

{
    "src": [
        "jss-5.4.2-2.oe2403sp1.src.rpm"
    ],
    "aarch64": [
        "jss-5.4.2-2.oe2403sp1.aarch64.rpm",
        "jss-debuginfo-5.4.2-2.oe2403sp1.aarch64.rpm",
        "jss-debugsource-5.4.2-2.oe2403sp1.aarch64.rpm",
        "jss-help-5.4.2-2.oe2403sp1.aarch64.rpm"
    ],
    "x86_64": [
        "jss-5.4.2-2.oe2403sp1.x86_64.rpm",
        "jss-debuginfo-5.4.2-2.oe2403sp1.x86_64.rpm",
        "jss-debugsource-5.4.2-2.oe2403sp1.x86_64.rpm",
        "jss-help-5.4.2-2.oe2403sp1.x86_64.rpm"
    ]
}