libcommons-lang-java (2.6-9ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: denial-of-service due to stack overflow
    - debian/patches/CVE-2025-48924.patch: Rewrite ClassUtils.getClass() without
      recursion to avoid StackOverflowError on very long inputs in
      src/main/java/org/apache/commons/lang/ClassUtils.java. Add test in
      src/test/java/org/apache/commons/lang/ClassUtilsOssFuzzTest.java.
    - CVE-2025-48924

 -- Edwin Jiang <edwin.jiang@canonical.com>  Fri, 29 May 2026 19:25:33 -0400

libcommons-lang-java (2.6-9) unstable; urgency=medium

  * No longer install the javadoc jar in the doc package
  * No longer parse the changelog in debian/rules
  * Standards-Version updated to 4.4.0
  * Use salsa.debian.org Vcs-* URLs
  * Use a secure URI in debian/watch

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 13 Sep 2019 10:10:13 +0200

libcommons-lang-java (2.6-8) unstable; urgency=medium

  * Team upload.
  * No longer build the enum package to fix the build failure with Java 9
    (Closes: #893229)
  * Switch to debhelper level 11

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 30 Mar 2018 10:25:50 +0200

libcommons-lang-java (2.6-7) unstable; urgency=medium

  * Team upload.
  * Moved the package to Git
  * Standards-Version updated to 4.1.3
  * Switch to debhelper level 10

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 12 Jan 2018 14:27:24 +0100

libcommons-lang-java (2.6-6) unstable; urgency=medium

  * Team upload.
  * Transition to bnd 2.1.0. Fix obsolete bnd parameter syntax in
    debian/rules.
  * wrap-and-sort -sa.
  * Vcs-Browser: Use https.

 -- Markus Koschany <apo@debian.org>  Tue, 17 Nov 2015 16:09:31 +0100

libcommons-lang-java (2.6-5) unstable; urgency=medium

  [ Emmanuel Bourg ]
  * Removed the unused debian/ant.properties file which is causing
    a build failure with debhelper 9.20150501
  * Standards-Version updated to 3.9.6 (no changes)

  [ Kumar Appaiah ]
  * debian/control: Remove Kumar Appaiah from uploaders

 -- Emmanuel Bourg <ebourg@apache.org>  Tue, 12 May 2015 01:04:09 +0200

libcommons-lang-java (2.6-4) unstable; urgency=medium

  * debian/control:
    - Removed Michael Koch from the uploaders (Closes: #654056)
    - Standards-Version updated to 3.9.5 (no changes)
    - Use canonical URLs for the Vcs-* fields
  * Switch to debhelper level 9
  * debian/copyright: Updated the Format URI

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 10 Jan 2014 16:01:02 +0100

libcommons-lang-java (2.6-3) unstable; urgency=low

  * Team upload.
  * Move libcommons-parent-java to Depends instead of Recommends.

 -- Damien Raude-Morvan <drazzib@debian.org>  Sun, 04 Dec 2011 02:59:41 +0100

libcommons-lang-java (2.6-2) unstable; urgency=low

  * Team upload.

  [ Ludovic Claude ]
  * Update compat to 7
  * d/control:
    - remove Build-Depends on cdbs
    - add Depends and Build-Depends on libcommons-parent-java
    - add cross suggest between the binary and the documentation packages
    - add Build-Depends-Indep on bnd
  * d/rules: update to use dh 7
  * remove OSGi_Manifest.patch, use bnd itself to generate the OSGi manifest
  * Update copyright, use DEP-5 format
  * Update installation of the Javadoc package
  * poms: remove --no-parent as the parent is now packaged, use
    --has-package-version, add properties for mh_install and for installing
    the Javadoc jar

  [ Damien Raude-Morvan ]
  * Remove Arnaud from Uploaders.

 -- Ludovic Claude <ludovic.claude@laposte.net>  Thu, 13 Oct 2011 21:09:20 +0100

libcommons-lang-java (2.6-1) unstable; urgency=low

  * Team upload.
  * New upstream release.
  * Set source package format as 3.0 (quilt).
  * Bump Standards-Version to 3.9.2. No changes were required.
  * Remove unnecessary Build-Depends on quilt.
  * Refresh patches.
  * Add mh_clean call in clean target.
  * Remove unnecessary dependency on JRE.
  * Link -doc javadocs with default-jdk-doc and add a Suggests dep on that.
  * Fix minor lintian warning about duplicate-short-description.

 -- Miguel Landaeta <miguel@miguel.cc>  Tue, 02 Aug 2011 15:17:59 -0430

# For older changelog entries, run 'apt-get changelog libcommons-lang-java-doc'
