-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 31 Aug 2025 19:27:35 +0200 Source: libcommons-lang-java Architecture: source Version: 2.6-10+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian Java Maintainers Changed-By: Daniel Leidert Closes: 1109126 Changes: libcommons-lang-java (2.6-10+deb13u1) trixie; urgency=medium . * Team upload. * d/patches/CVE-2025-48924.patch: Add patch to fix CVE-2025-48924. - Fix an uncontrolled recursion vulnerability (closes: 1109126). Checksums-Sha1: d18e9b1a12a8d9b238542648d70fe15433020b3d 2268 libcommons-lang-java_2.6-10+deb13u1.dsc e828934b6e21b41b824a2392cb1a4c62f241d4c3 564032 libcommons-lang-java_2.6.orig.tar.gz a8e9b137995bf8268f9cf4610864f0c68be5995f 9404 libcommons-lang-java_2.6-10+deb13u1.debian.tar.xz 5cdabccf1375743c4c9565b206ea51d3a1cbffc2 11719 libcommons-lang-java_2.6-10+deb13u1_amd64.buildinfo Checksums-Sha256: 5c073c2afc0135f46a915c7040c57eaa6ce885355fc7c5a7071a4c1305980cda 2268 libcommons-lang-java_2.6-10+deb13u1.dsc 05479771851be0af057032fa26ad90aa0c91c10e1fc4439558a1ffa6f053bcd7 564032 libcommons-lang-java_2.6.orig.tar.gz 841343bcac4941a7737323aec435167e3d7e74f5e3987204287add1571a0333c 9404 libcommons-lang-java_2.6-10+deb13u1.debian.tar.xz 10b432b1f7623bb1cf5c7f9e55a91bc85c9aa371139ff4ab380a3e1ebc15955a 11719 libcommons-lang-java_2.6-10+deb13u1_amd64.buildinfo Files: 0d6c235e90a9b0e420b23aae677d0c14 2268 java optional libcommons-lang-java_2.6-10+deb13u1.dsc 37ee469f4caff6cfa28f9d0a0be2d4d2 564032 java optional libcommons-lang-java_2.6.orig.tar.gz df9e3f89f82476d2b3154c7f26d07622 9404 java optional libcommons-lang-java_2.6-10+deb13u1.debian.tar.xz 8e7e17d0d4c00986627b519496f3d1ea 11719 java optional libcommons-lang-java_2.6-10+deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmj6pjQACgkQS80FZ8KW 0F1g3BAApRyLGakfHp/yAZz8M1lXXkArZcs8+LOgkk0+y48dW6nRcNKBUx96dg0f ZV/ATE2QYB8P1KnxEiH5iuyAUpP2kiD/gIaEoe2iRGuNuxtfv3yAxhRfbUZ+PqlZ um8/gVWMAgEkI1HXraZKO37CrTz8yqwZ6F3kpsCNPvbhT07OiDh5aWgcAPkC7XSh /5KUyj8CJ59bU4e62Cw7pLYxkngmXOSXWouSp8Zk9OHu4tVHJu3BKuPDGq3ApIgL 4CNQdvFDAiHnXAo/yo6OfFMy07U/jIhef6qZv3ySInXVM/g38/mLkoQyHkvEBklz vVQfg+9bv4oUyhmhTn1M1/+dXxMKW2GBkp40YKK4mSDRPjkjGuqINCRz9STTKLcp 5pFiA64yCfh+U7R8LZQn/g9KDLAWHaiRjSKOTsMY6/6hvk++Tll3Siax+el/DHoi EeRe9jv4xLsQtnlp0hfcJUvujzLxOsLtwLGyoUCWVtTBY5eCe8kWS6kGT4ORPBVo glSFXENaIqPtv/so4WHSW8QJx1iWSZ6+JRYbZTtIYJasw/kLipZ2MoOgcF6s9WeN smH3PwPQWctIDrT9zfIj+Pj2ZhuNYKHFwL4gTbw0WDbsOumU96bNAGC3dNAWldgg /OkXlKaiJlFjOHf9SL6Huc16IxC+EVGV2NHXiVPWMInK2sVyHxI= =HSkK -----END PGP SIGNATURE-----