Debian alert DLA-4262-2 (libcommons-lang-java)

From:
             
 
Daniel Leidert <dleidert@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4262-2] libcommons-lang-java regression update
Date:
             
 
Tue, 30 Sep 2025 23:57:33 +0200
Message-ID:
             
 
<faee5c11bf0d20de0d5513a7c83d5ce7208914c6.camel@debian.org>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4262-2                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                       Daniel Leidert
September 30, 2025                            https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : libcommons-lang-java
Version        : 2.6-9+deb11u2
CVE ID         : CVE-2025-48924

A regression has been discovered in the latest release 2.6-9+deb11u1
of libcommons-lang-java. The patch to fix CVE-2025-48924 had not been
properly backported.

For Debian 11 bullseye, this problem has been fixed in version
2.6-9+deb11u2.

We recommend that you upgrade your libcommons-lang-java packages.

For the detailed security status of libcommons-lang-java please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libcommons-la...

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=m1Vq
-----END PGP SIGNATURE-----