From: ftpmaster@ftp-master.debian.org 
  
 -----BEGIN PGP SIGNED MESSAGE----- 
 Hash: SHA512 
  
 Format: 1.8 
 Date: Sun, 31 Aug 2025 19:27:35 +0200 
 Source: libcommons-lang-java 
 Architecture: source 
 Version: 2.6-10+deb13u1 
 Distribution: trixie 
 Urgency: medium 
 Maintainer: Debian Java Maintainers  
 Changed-By: Daniel Leidert  
 Closes: 1109126 
 Changes: 
  libcommons-lang-java (2.6-10+deb13u1) trixie; urgency=medium 
  . 
    * Team upload. 
    * d/patches/CVE-2025-48924.patch: Add patch to fix CVE-2025-48924. 
      - Fix an uncontrolled recursion vulnerability (closes: 1109126). 
 Checksums-Sha1: 
  d18e9b1a12a8d9b238542648d70fe15433020b3d 2268 libcommons-lang-j 
 va_2.6-10+deb13u1.dsc 
  e828934b6e21b41b824a2392cb1a4c62f241d4c3 564032 libcommons-lang 
 java_2.6.orig.tar.gz 
  a8e9b137995bf8268f9cf4610864f0c68be5995f 9404 libcommons-lang-j 
 va_2.6-10+deb13u1.debian.tar.xz 
  5cdabccf1375743c4c9565b206ea51d3a1cbffc2 11719 libcommons-lang- 
 ava_2.6-10+deb13u1_amd64.buildinfo 
 Checksums-Sha256: 
  5c073c2afc0135f46a915c7040c57eaa6ce885355fc7c5a7071a4c1305980cda 2268 
 libcommons-lang-java_2.6-10+deb13u1.dsc 
  05479771851be0af057032fa26ad90aa0c91c10e1fc4439558a1ffa6f053bcd7 564032 
 libcommons-lang-java_2.6.orig.tar.gz 
  841343bcac4941a7737323aec435167e3d7e74f5e3987204287add1571a0333c 9404 
 libcommons-lang-java_2.6-10+deb13u1.debian.tar.xz 
  10b432b1f7623bb1cf5c7f9e55a91bc85c9aa371139ff4ab380a3e1ebc15955a 11719 
 libcommons-lang-java_2.6-10+deb13u1_amd64.buildinfo 
 Files: 
  0d6c235e90a9b0e420b23aae677d0c14 2268 java optional libcommons- 
 ang-java_2.6-10+deb13u1.dsc 
  37ee469f4caff6cfa28f9d0a0be2d4d2 564032 java optional libcommon 
 -lang-java_2.6.orig.tar.gz 
  df9e3f89f82476d2b3154c7f26d07622 9404 java optional libcommons- 
 ang-java_2.6-10+deb13u1.debian.tar.xz 
  8e7e17d0d4c00986627b519496f3d1ea 11719 java optional libcommons 
 lang-java_2.6-10+deb13u1_amd64.buildinfo 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmj6pjQACgkQS80FZ8KW 
 0F1g3BAApRyLGakfHp/yAZz8M1lXXkArZcs8+LOgkk0+y48dW6nRcNKBUx96dg0f 
 ZV/ATE2QYB8P1KnxEiH5iuyAUpP2kiD/gIaEoe2iRGuNuxtfv3yAxhRfbUZ+PqlZ 
 um8/gVWMAgEkI1HXraZKO37CrTz8yqwZ6F3kpsCNPvbhT07OiDh5aWgcAPkC7XSh 
 /5KUyj8CJ59bU4e62Cw7pLYxkngmXOSXWouSp8Zk9OHu4tVHJu3BKuPDGq3ApIgL 
 4CNQdvFDAiHnXAo/yo6OfFMy07U/jIhef6qZv3ySInXVM/g38/mLkoQyHkvEBklz 
 vVQfg+9bv4oUyhmhTn1M1/+dXxMKW2GBkp40YKK4mSDRPjkjGuqINCRz9STTKLcp 
 5pFiA64yCfh+U7R8LZQn/g9KDLAWHaiRjSKOTsMY6/6hvk++Tll3Siax+el/DHoi 
 EeRe9jv4xLsQtnlp0hfcJUvujzLxOsLtwLGyoUCWVtTBY5eCe8kWS6kGT4ORPBVo 
 glSFXENaIqPtv/so4WHSW8QJx1iWSZ6+JRYbZTtIYJasw/kLipZ2MoOgcF6s9WeN 
 smH3PwPQWctIDrT9zfIj+Pj2ZhuNYKHFwL4gTbw0WDbsOumU96bNAGC3dNAWldgg 
 /OkXlKaiJlFjOHf9SL6Huc16IxC+EVGV2NHXiVPWMInK2sVyHxI= 
 =HSkK 
 -----END PGP SIGNATURE----- 
  
  
 --==============e91103623965662745=Content-Type: application/pgp-signature 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaQR+pAAKCRCb9qggYcy5 
 IfmKAP9qJZsuz0xc2+op6EIRKkz4MLTQ06THSNBdmq/HpF2ezwD/YtqbuG5zHe4r 
 KYdT2FODLRPYFVMGzkwvnHsx2FMtpAU€Zh 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)