-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 Aug 2025 04:32:26 +0200 Source: libcommons-lang-java Architecture: source Version: 2.6-9+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Daniel Leidert <dleidert@debian.org> Closes: 1109126 Changes: libcommons-lang-java (2.6-9+deb11u1) bullseye-security; urgency=medium . * Non-maintainer upload by the Debian LTS team. * d/patches/CVE-2025-48924.patch: Add patch to fix CVE-2025-48924. - Fix an uncontrolled recursion vulnerability (closes: 1109126). Checksums-Sha1: 40d6b4182554d68161f0de0a449b504b73dc3436 2258 libcommons-lang-java_2.6-9+deb11u1.dsc e828934b6e21b41b824a2392cb1a4c62f241d4c3 564032 libcommons-lang-java_2.6.orig.tar.gz 6275acc9b4d80aa9a469371355f7ffa2984766df 9184 libcommons-lang-java_2.6-9+deb11u1.debian.tar.xz e20f961eb35d8c81ec887b0399436be4c3fec746 10077 libcommons-lang-java_2.6-9+deb11u1_amd64.buildinfo Checksums-Sha256: e44c92b04f3916347ce744bf7e97d9cb8737a54e48e04984ae8fd80899980573 2258 libcommons-lang-java_2.6-9+deb11u1.dsc 05479771851be0af057032fa26ad90aa0c91c10e1fc4439558a1ffa6f053bcd7 564032 libcommons-lang-java_2.6.orig.tar.gz 98638ac508a426c156173b96391f86f61e6efeb287ab7d953bc6f4088c787367 9184 libcommons-lang-java_2.6-9+deb11u1.debian.tar.xz d92f2e7ea6e03b8a18f662c019820e725bb9173f167b4166cfc071ece4374f58 10077 libcommons-lang-java_2.6-9+deb11u1_amd64.buildinfo Files: bd95d4ab01f6d2e969ecac5cf02849ab 2258 java optional libcommons-lang-java_2.6-9+deb11u1.dsc 37ee469f4caff6cfa28f9d0a0be2d4d2 564032 java optional libcommons-lang-java_2.6.orig.tar.gz 8cbc661dfad48975297fbb29814e3a67 9184 java optional libcommons-lang-java_2.6-9+deb11u1.debian.tar.xz 911b247d3a7698cbe082936ad455334f 10077 java optional libcommons-lang-java_2.6-9+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmiMKXwACgkQS80FZ8KW 0F1XtBAAk3DZbSqvVQGKVrvgoQ42oJvVvwsDTFkQQ3zajvnlYIE9gVbsJyHKTuum 55WVsdGJEl8PA29+gBJSf7kwS5nwxhHd9r8C44UT9KXbGyseB8npHmTnQ1U/y6Eh NCGnMgNoPwyRfpAFlreCAgc1Ol/ruecBAzzKHWmwfTVMPumCyBak5g7gI1wPgtMn L030KCnAK9eNvKqFGacTJYryakIe73AloH/KtGd7gA905csSLhlp/DQFx2Ksn7il luf2nw4aJ5ZAm22+GKNYy1i9b6Ebyur8p+bAew7xdQJY2RiTrOoB5C28Yq6eJy+P YwZ//83d3k+6+hsWazWf7Qqo+2QHW6wu6Zi9X6ic8nz59saceL+bemaLtPmiKrUw SQ5Rh96a2AyGIw6eALpJEL4YWdQ+rBwjc4Ms1TPnO3PZzpDRCSNid/lMTdvIkMLO 1X4DIiXTb0LbbUYLEtqEk5LHjAGpva1ic9xrqi/JxUJCrL1pL27sUESGkJR8ori2 lXrAPt4tw/BTqXK/JSBHLdZNMBMOZtDHye9SZvZiM+DUxtN3h/sfFtvYCaY4WETs 76uDLQDhPRwVKnv89/5YLfrdfG4BQ6y7aneZB7pLS5hft08iV2PYq33RcCcGl3Fu UyV7c2S27Uundflll7MGj/BmxjnDRivS2df2vmdSgwLGMc7HKgc= =HhU1 -----END PGP SIGNATURE-----
Attachment:
pgpaWwwFIObc9.pgp
Description: PGP signature