Package: libcommons-lang-java / 2.6-11
Metadata
Package | Version | Patches format |
---|---|---|
libcommons-lang-java | 2.6-11 | 3.0 (quilt) |
Patch series
view the series filePatch | File delta | Description |
---|---|---|
01 source encoding.patch | (download) |
build.xml |
6 4 + 2 - 0 ! |
set the source encoding to fix the build failure with recent jdks |
02 java17 compatibility.patch | (download) |
src/main/java/org/apache/commons/lang/math/JVMRandom.java |
2 1 + 1 - 0 ! |
fixes the compatibility with java 17 |
03 CVE 2025 48924.patch | (download) |
src/main/java/org/apache/commons/lang/ClassUtils.java |
46 22 + 24 - 0 ! |
[patch] rewrite classutils.getclass() without recursion to avoid StackOverflowError on very long inputs. - This was found fuzz testing Apache Commons Text which relies on ClassUtils. - OssFuzz Issue 42522972: apache-commons-text:StringSubstitutorInterpolatorFuzzer: Security exception in org.apache.commons.lang3.ClassUtils.getClass |
1