UbuntuUpdates.org

Package "libcommons-lang-java"

Name: libcommons-lang-java

Description:

Commons Lang - an extension of the java.lang package
Latest version: 2.6-9ubuntu0.22.04.1
Release: jammy (22.04)
Level: security
Repository: universe
Homepage: http://commons.apache.org/lang/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libcommons-lang-java"

All arch deb package
APT INSTALL

Other versions of "libcommons-lang-java" in Jammy

Repository Area Version
base universe 2.6-9
updates universe 2.6-9ubuntu0.22.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.6-9ubuntu0.22.04.1 2026-06-02 14:07:26 UTC

  libcommons-lang-java (2.6-9ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: denial-of-service due to stack overflow
    - debian/patches/CVE-2025-48924.patch: Rewrite ClassUtils.getClass() without
      recursion to avoid StackOverflowError on very long inputs in
      src/main/java/org/apache/commons/lang/ClassUtils.java. Add test in
      src/test/java/org/apache/commons/lang/ClassUtilsOssFuzzTest.java.
    - CVE-2025-48924

 -- Edwin Jiang <email address hidden> Fri, 29 May 2026 19:25:33 -0400
CVE-2025-48924 Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to


About   -   Send Feedback to @ubuntu_updates