-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Oct 2025 03:48:57 +0200
Source: libcommons-lang3-java
Architecture: source
Version: 3.12.0-2+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Daniel Leidert <dleidert@debian.org>
Closes: 1109125
Changes:
 libcommons-lang3-java (3.12.0-2+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * d/patches/CVE-2025-48924.patch: Add patch to fix CVE-2025-48924.
     - Fix an uncontrolled recursion vulnerability (closes: 1109125).
Checksums-Sha1:
 d8d0e357e97e0f0146ee839971b03418fcecba6a 2392 libcommons-lang3-java_3.12.0-2+deb12u1.dsc
 45abf88a76ba6a02efbb1ec928fa0c0c895347da 664116 libcommons-lang3-java_3.12.0.orig.tar.xz
 3526a42e17aac0722b365f94c6acf7c92029d992 8500 libcommons-lang3-java_3.12.0-2+deb12u1.debian.tar.xz
 dc96df8ccb25aa255ab482a956c2f8ae5e96cb2f 15918 libcommons-lang3-java_3.12.0-2+deb12u1_amd64.buildinfo
Checksums-Sha256:
 3978d55a9719ee5ef63244fe276bcb0ae236efec0f878dd3f6aad0cad9efea28 2392 libcommons-lang3-java_3.12.0-2+deb12u1.dsc
 f7c22574707611b63bae19ff17f59e24cdd32e2b0e61a50ec9b1b525fbc909d1 664116 libcommons-lang3-java_3.12.0.orig.tar.xz
 dc17cf7f5906b6d43db49ef8503c111c2626015a28db87072dac6807964b95a8 8500 libcommons-lang3-java_3.12.0-2+deb12u1.debian.tar.xz
 67a8df55f3278d4185a1dd8d6a5963b088afe534371a4912cb4298ac7e65c539 15918 libcommons-lang3-java_3.12.0-2+deb12u1_amd64.buildinfo
Files:
 2f31183a7c2ed3d7b69e367e34d41527 2392 java optional libcommons-lang3-java_3.12.0-2+deb12u1.dsc
 d7f614853cadc66742cf96ec0ee1f99e 664116 java optional libcommons-lang3-java_3.12.0.orig.tar.xz
 ebbd082b650a2a5c8feb098b1cfaa1b7 8500 java optional libcommons-lang3-java_3.12.0-2+deb12u1.debian.tar.xz
 b479c71ad3ea5dd56f5869633c9d3d9e 15918 java optional libcommons-lang3-java_3.12.0-2+deb12u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmk1VRsACgkQS80FZ8KW
0F1k8xAAhkF0isgDVqyOar/tvabP84Ggr4QQbly3DnbYzp98n3+3jLdNnE4icfE1
9fYNalU/pyWCeJimNNsaID3tdOyPaifbTn+z0EA1AgQdYlAaKycKnM9soy4Kj/DB
TROEIEx6i2DIH8lAd30J5MKUcvBcCN5UNOkMHw1vaZ4ZvCxIP2K6/RW0AVEwlIJT
sU+1zvpO7GV+bz+PIUZZqH1nxrRDclIbGxC8GAMhMI7HWqSWaxUzfqYLYHihFJ2A
D22fdGabnWdRcDBh6Bj/4yPLzz0S7Lm1HGd866TM0jnzkPpfrD/Wc8LqZHyn+lKi
FhJJzeixpyRCgGKypabaqOXLx7R8OTwSdVG9vVAbyovtBpnFTzzuSMfe1w1PjqGw
/YnsxNc1QiTihPdL13SpEfJFhRuTMnKp/aIRDuPddm46dDyUdZ72Tcicqp8uhIi0
HVSEVCphWig6589xRjWsSZs6xrtsm4Y9vd+BxwEOtM+ZElZAlG2PgA7ffd5t7x0h
ijIQSbRA/n6DkwXOHqqstN2rJ0fVqU/znQD6R5Z08zmIULw+0M3v3lpbTEuc6NBl
2ybTf+l5gHufGY01B8NiN9D8QNeexUsErCAIjdz/u/RYSNtaOExPPD4RZf1dydWo
M1OkPm2CcbALnPr6b7Siwtnb0UMnsJUr9UGKbZ/7ydoiHomQcG8=
=o1eG
-----END PGP SIGNATURE-----