-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 31 Aug 2025 19:06:43 +0200
Source: libcommons-lang-java
Architecture: source
Version: 2.6-10+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Daniel Leidert <dleidert@debian.org>
Closes: 1109126
Changes:
 libcommons-lang-java (2.6-10+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * d/patches/CVE-2025-48924.patch: Add patch to fix CVE-2025-48924.
     - Fix an uncontrolled recursion vulnerability (closes: 1109126).
Checksums-Sha1:
 3b8cf7ac0a03d13b461a9d4d8afde92c0bf87f80 2268 libcommons-lang-java_2.6-10+deb12u1.dsc
 e828934b6e21b41b824a2392cb1a4c62f241d4c3 564032 libcommons-lang-java_2.6.orig.tar.gz
 8dadc2d6beb1fd4bbd1adfb49c12b5f647814651 9404 libcommons-lang-java_2.6-10+deb12u1.debian.tar.xz
 b0863799fca9b8a1116ca578e930fb344b5e05c0 11287 libcommons-lang-java_2.6-10+deb12u1_amd64.buildinfo
Checksums-Sha256:
 be1d70b5f138d4bba4ac632837a7fa36859baec23217e59558e6aaa49b43aa84 2268 libcommons-lang-java_2.6-10+deb12u1.dsc
 05479771851be0af057032fa26ad90aa0c91c10e1fc4439558a1ffa6f053bcd7 564032 libcommons-lang-java_2.6.orig.tar.gz
 a652fb811b067e6edf9f8fbc3cadb6dc56006cf94d3658d94c636d19d1502c03 9404 libcommons-lang-java_2.6-10+deb12u1.debian.tar.xz
 a5930fac84632fdfa25ddbb1127427c5556fbb2dcc29a6fad483e80aae6becea 11287 libcommons-lang-java_2.6-10+deb12u1_amd64.buildinfo
Files:
 8d51d751ad5c6f6bb1bbb45725908e3f 2268 java optional libcommons-lang-java_2.6-10+deb12u1.dsc
 37ee469f4caff6cfa28f9d0a0be2d4d2 564032 java optional libcommons-lang-java_2.6.orig.tar.gz
 1f4ac9c552a86eae653f83ed1f432fe6 9404 java optional libcommons-lang-java_2.6-10+deb12u1.debian.tar.xz
 ac9cddd7371dc8e97d35de96d61db15f 11287 java optional libcommons-lang-java_2.6-10+deb12u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=pDaY
-----END PGP SIGNATURE-----