-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 31 Aug 2025 21:12:11 +0200
Source: libcommons-lang3-java
Architecture: source
Version: 3.17.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Daniel Leidert <dleidert@debian.org>
Closes: 1109125
Changes:
 libcommons-lang3-java (3.17.0-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/patches/CVE-2025-48924.patch: Add patch to fix CVE-2025-48924.
     - Fix an uncontrolled recursion vulnerability (closes: 1109125).
Checksums-Sha1:
 4e9bc2dc7491f0eb9cc667149da34501d316b036 2304 libcommons-lang3-java_3.17.0-1+deb13u1.dsc
 2f09636ac84cdf06be347aea59585a5d1d990077 742604 libcommons-lang3-java_3.17.0.orig.tar.xz
 751676c64686248e7540b228fab5410987d0f48e 7476 libcommons-lang3-java_3.17.0-1+deb13u1.debian.tar.xz
 445b7be99177e23b7785e295424dc8be877b0de2 15325 libcommons-lang3-java_3.17.0-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 f26b4e92366e4534f7f7243bdd26f2726787dddc2c57ece863811e860369b013 2304 libcommons-lang3-java_3.17.0-1+deb13u1.dsc
 b88ec2ca0e4af38a01bbf34b1e04794c058ebdb77039e4de6af98ddfc3b0bfa1 742604 libcommons-lang3-java_3.17.0.orig.tar.xz
 c16bc4041591b37b44249468b76f21eb860ac2f8b349076f40830210dd62fd74 7476 libcommons-lang3-java_3.17.0-1+deb13u1.debian.tar.xz
 2e9e6d0675b4d23760baecf8934eb3e4b9db4f97f2772486e29bfd2f621d39ff 15325 libcommons-lang3-java_3.17.0-1+deb13u1_amd64.buildinfo
Files:
 ce45447fca5f10b8efb80b5b8f1dacd5 2304 java optional libcommons-lang3-java_3.17.0-1+deb13u1.dsc
 1ac6deea4b923eef8b903c3be4910207 742604 java optional libcommons-lang3-java_3.17.0.orig.tar.xz
 bc9d5a96bc607416cce959148e7250dd 7476 java optional libcommons-lang3-java_3.17.0-1+deb13u1.debian.tar.xz
 498f3152e6845cb97ba3efb68cb59d2d 15325 java optional libcommons-lang3-java_3.17.0-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=tmle
-----END PGP SIGNATURE-----