-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 31 Aug 2025 17:45:36 +0200
Source: libcommons-lang3-java
Architecture: source
Version: 3.11-1+deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Daniel Leidert <dleidert@debian.org>
Closes: 1109125
Changes:
libcommons-lang3-java (3.11-1+deb11u1) bullseye-security; urgency=medium
.
* Non-maintainer upload by the Debian LTS team.
* d/patches/CVE-2025-48924.patch: Add patch to fix CVE-2025-48924.
- Fix an uncontrolled recursion vulnerability (closes: 1109125).
Checksums-Sha1:
3a6477556948848061163124cda9a2e6975b706f 2369 libcommons-lang3-java_3.11-1+deb11u1.dsc
b7249ab352d8a8057ec2e19a64db55a542b3f307 652408 libcommons-lang3-java_3.11.orig.tar.xz
4a239919a40ca8dcfc97fee539951431eed50cab 8416 libcommons-lang3-java_3.11-1+deb11u1.debian.tar.xz
df8fcb1976da1d6b9d12ffab55ad6dae84a4ec54 14706 libcommons-lang3-java_3.11-1+deb11u1_amd64.buildinfo
Checksums-Sha256:
a1a8edd3b58d8f9fdbc12996245d72b2e513eb5ffa6b0f6960593abc4505cdd5 2369 libcommons-lang3-java_3.11-1+deb11u1.dsc
706b4560d09d16fda27de72456ea4cb145aa4d60064015adcc74f6824a17f0fa 652408 libcommons-lang3-java_3.11.orig.tar.xz
b33835accc4046434e2c743b157c722a924a99cb68c46a858e99407d52744613 8416 libcommons-lang3-java_3.11-1+deb11u1.debian.tar.xz
b0a0536500b6c04d575b2525df1aa988fdb02a835985240b8c91f79553f62407 14706 libcommons-lang3-java_3.11-1+deb11u1_amd64.buildinfo
Files:
6f788bf1f5b7c971c5b35405227e1029 2369 java optional libcommons-lang3-java_3.11-1+deb11u1.dsc
87d9eda33b61f5e8fa4372f07c0bf8ba 652408 java optional libcommons-lang3-java_3.11.orig.tar.xz
b12bfafada98825bd7219f6383967917 8416 java optional libcommons-lang3-java_3.11-1+deb11u1.debian.tar.xz
5aa319f3818e56f9db086ccf680e17ec 14706 java optional libcommons-lang3-java_3.11-1+deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=AnJt
-----END PGP SIGNATURE-----
Attachment:
pgpHuNAme4pTT.pgp
Description: PGP signature