Critical DSA-3893-1 1 CVE

jython - security update

Published Jun 22, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 8	jython	2.5.3-3+deb8u1
Debian · 9	jython	2.5.3-16+deb9u1

Vulnerabilities 1

Critical 9.8

CVE-2016-4000

Deserialization of Untrusted Data in Jython

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

jython jython org.python:jython-standalone org.python:jython Debian Ubuntu Maven

Jul 6, 2017