An update for apache-mime4j is now available for openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2025-2296 Final 1.0 1.0 2025-09-19 Initial 2025-09-19 2025-09-19 openEuler SA Tool V1.0 2025-09-19 apache-mime4j security update An update for apache-mime4j is now available for openEuler-20.03-LTS-SP4 Java stream based MIME message parser. Security Fix(es): Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions. We recommend users to upgrade to MIME4j version 0.8.9 or later. (CVE-2022-45787) An update for apache-mime4j is now available for openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium apache-mime4j https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2296 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2022-45787 https://nvd.nist.gov/vuln/detail/CVE-2022-45787 openEuler-20.03-LTS-SP4 apache-mime4j-0.8.1-3.oe2003sp4.noarch.rpm apache-mime4j-javadoc-0.8.1-3.oe2003sp4.noarch.rpm apache-mime4j-0.8.1-3.oe2003sp4.src.rpm Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions. We recommend users to upgrade to MIME4j version 0.8.9 or later. 2025-09-19 CVE-2022-45787 openEuler-20.03-LTS-SP4 Medium 5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N apache-mime4j security update 2025-09-19 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2296