Critical DLA-989-1 1 CVE

jython - security update

Published Jun 17, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	jython	2.5.2-1+deb7u1

Vulnerabilities 1

Critical 9.8

CVE-2016-4000

Deserialization of Untrusted Data in Jython

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

jython jython org.python:jython-standalone org.python:jython Debian Ubuntu Maven

Jul 6, 2017