libcommons-lang3-java (3.11-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: denial-of-service due to stack overflow
    - debian/patches/CVE-2025-48924.patch: Rewrite ClassUtils.getClass() without
      recursion to avoid StackOverflowError on very long inputs in
      src/main/java/org/apache/commons/lang3/ClassUtils.java. Add test in
      src/test/java/org/apache/commons/lang3/ClassUtilsOssFuzzTest.java.
    - CVE-2025-48924

 -- Edwin Jiang <edwin.jiang@canonical.com>  Fri, 29 May 2026 19:25:43 -0400

libcommons-lang3-java (3.11-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 3.11
  * Adapting d/watch file to the upstream's tag naming scheme.
  * Refreshing patches.
  * Updating copyright years.
  * Skipping tests due to unpackaged dependencies.

 -- Andrius Merkys <merkys@debian.org>  Mon, 27 Jul 2020 08:41:37 -0400

libcommons-lang3-java (3.8-2) unstable; urgency=medium

  * Team upload.
  * Fixed the build failure with Easymock 4 (Closes: #912516)

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 26 Nov 2018 00:50:10 +0100

libcommons-lang3-java (3.8-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Fixes another issue with Java 11 (Closes: #903769)
    - Refreshed the patches
    - Ignore japicmp-maven-plugin
  * Standards-Version updated to 4.2.1

 -- Emmanuel Bourg <ebourg@apache.org>  Wed, 19 Sep 2018 15:40:32 +0200

libcommons-lang3-java (3.7-1) unstable; urgency=medium

  * New upstream release
    - Fixes the compatibility with Java 10 and 11
      (Closes: #895234, #895234, #895585, #895583)
    - Refreshed the patch
    - Ignore the new test dependencies JMH and BCEL
  * Removed Damien Raude-Morvan from the uploaders (Closes: #889466)
  * No longer use the git mode in debian/watch to work around a git bug
  * Removed the get-orig-source target in debian/rules
  * Use salsa.debian.org Vcs-* URLs
  * Updated the package description

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 04 May 2018 02:55:34 +0200

libcommons-lang3-java (3.5-2) unstable; urgency=medium

  * Team upload.
  * Use compat level 11.
  * Declare compliance with Debian Policy 4.1.4.
  * Set source/target to 1.7.
  * Ignore the test failures with Java 9. (Closes: #893231)

 -- Markus Koschany <apo@debian.org>  Mon, 16 Apr 2018 14:30:12 +0200

libcommons-lang3-java (3.5-1) unstable; urgency=medium

  * New upstream release
    - Refreshed the patch
  * Track and download the new releases from the upstream Git repository

 -- Emmanuel Bourg <ebourg@apache.org>  Thu, 20 Oct 2016 19:08:15 +0200

libcommons-lang3-java (3.4-2) unstable; urgency=medium

  * Enabled the OSGi metadata (Closes: #782151)
  * Relocated the 3.x artifacts to the 'debian' version
  * Build with the DH sequencer instead of CDBS
  * Standards-Version updated to 3.9.8
  * Use secure Vcs-* URLs
  * debian/watch: Track the upstream source tarballs

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 01 Aug 2016 13:17:47 +0200

libcommons-lang3-java (3.4-1) unstable; urgency=medium

  * New upstream release
    - Build depend on junit4 >= 4.12
  * Standards-Version updated to 3.9.6 (no changes)

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 27 Apr 2015 12:44:51 +0200

libcommons-lang3-java (3.3.2-1) unstable; urgency=medium

  * New upstream release

 -- Emmanuel Bourg <ebourg@apache.org>  Thu, 17 Apr 2014 08:55:18 +0200

# For older changelog entries, run 'apt-get changelog libcommons-lang3-java-doc'
