tocsin

Debian/jython: unknown

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

Action: Upgrade jython to 2.7.1+repack-1 or later.

Affected

introducedfixedlast affected
02.7.1+repack-1-

Fixed versions

2.7.1+repack-1

Sources

published · modified · JSON