libcommons-lang-java (2.6-10ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: denial-of-service due to stack overflow
    - debian/patches/CVE-2025-48924.patch: Rewrite ClassUtils.getClass() without
      recursion to avoid StackOverflowError on very long inputs in
      src/main/java/org/apache/commons/lang/ClassUtils.java. Add test in
      src/test/java/org/apache/commons/lang/ClassUtilsOssFuzzTest.java.
    - CVE-2025-48924

 -- Edwin Jiang <edwin.jiang@canonical.com>  Fri, 29 May 2026 16:55:28 -0400

libcommons-lang-java (2.6-10) unstable; urgency=medium

  * Fixed the build failure with Java 17 (Closes: #1011120)
  * No longer append on debian/.mh_clean during the build (Closes: #985648)
  * Standards-Version updated to 4.6.1
  * Switch to debhelper level 13

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 23 May 2022 11:24:24 +0200

libcommons-lang-java (2.6-9) unstable; urgency=medium

  * No longer install the javadoc jar in the doc package
  * No longer parse the changelog in debian/rules
  * Standards-Version updated to 4.4.0
  * Use salsa.debian.org Vcs-* URLs
  * Use a secure URI in debian/watch

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 13 Sep 2019 10:10:13 +0200

libcommons-lang-java (2.6-8) unstable; urgency=medium

  * Team upload.
  * No longer build the enum package to fix the build failure with Java 9
    (Closes: #893229)
  * Switch to debhelper level 11

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 30 Mar 2018 10:25:50 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libcommons-lang-java-doc`.
