CVE-2025-48924

EUVD-2025-21159
Uncontrolled Recursion vulnerability in Apache Commons Lang.

This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.

The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a 
StackOverflowError could cause an application to stop.

Users are recommended to upgrade to version 3.18.0, which fixes the issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 81.84%
Affected Products (NVD)
VendorProductVersion
apachecommons_lang
2.0 ≤
𝑥
< 2.6
apachecommons_lang
3.0 ≤
𝑥
< 3.18.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libcommons-lang-java
bookworm
2.6-10+deb12u1
fixed
bullseye
vulnerable
bullseye (security)
2.6-9+deb11u2
fixed
forky
2.6-12
fixed
sid
2.6-12
fixed
trixie
2.6-10+deb13u1
fixed
libcommons-lang3-java
bookworm
3.12.0-2+deb12u1
fixed
bullseye
vulnerable
bullseye (security)
3.11-1+deb11u2
fixed
forky
3.20.0-1
fixed
sid
3.20.0-1
fixed
trixie
3.17.0-1+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libcommons-lang-java
bionic
Fixed 2.6-8ubuntu0.1~esm1
released
focal
Fixed 2.6-9ubuntu0.20.04.1~esm1
released
jammy
Fixed 2.6-9ubuntu0.22.04.1
released
noble
Fixed 2.6-10ubuntu0.1
released
plucky
ignored
questing
not-affected
resolute
not-affected
trusty
Fixed 2.6-3ubuntu2+esm1
released
xenial
Fixed 2.6-6ubuntu2+esm1
released
libcommons-lang3-java
bionic
Fixed 3.8-1~18.04.2+esm1
released
focal
Fixed 3.8-2ubuntu0.1~esm1
released
jammy
Fixed 3.11-1ubuntu0.1
released
noble
Fixed 3.14.0-1ubuntu0.1~esm1
released
plucky
ignored
questing
ignored
resolute
not-affected
trusty
Fixed 3.2.1-1ubuntu0.1~esm1
released
xenial
Fixed 3.4-1ubuntu0.1~esm1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
apache-commons-compress
suse enterprise desktop 15 SP7
1.28.0-150200.3.21.1
fixed
suse enterprise sap 15 SP4
1.28.0-150200.3.21.1
fixed
suse enterprise sap 15 SP5
1.28.0-150200.3.21.1
fixed
suse enterprise sap 15 SP6
1.28.0-150200.3.21.1
fixed
suse enterprise sap 15 SP7
1.28.0-150200.3.21.1
fixed
suse enterprise server 15 SP4
1.28.0-150200.3.21.1
fixed
suse enterprise server 15 SP5
1.28.0-150200.3.21.1
fixed
suse enterprise server 15 SP6
1.28.0-150200.3.21.1
fixed
suse enterprise server 15 SP7
1.28.0-150200.3.21.1
fixed
apache-commons-lang
suse enterprise desktop 15 SP6
2.6-150200.14.3.1
fixed
suse enterprise desktop 15 SP7
2.6-150200.14.3.1
fixed
suse enterprise sap 15 SP6
2.6-150200.14.3.1
fixed
suse enterprise sap 15 SP7
2.6-150200.14.3.1
fixed
suse enterprise server 15 SP4
2.6-150200.14.3.1
fixed
suse enterprise server 15 SP6
2.6-150200.14.3.1
fixed
suse enterprise server 15 SP7
2.6-150200.14.3.1
fixed
apache-commons-lang3
suse enterprise desktop 15 SP6
3.18.0-150200.3.12.1
fixed
suse enterprise desktop 15 SP7
3.20.0-150200.3.15.2
fixed
suse enterprise sap 15 SP4
3.20.0-150200.3.15.2
fixed
suse enterprise sap 15 SP5
3.20.0-150200.3.15.2
fixed
suse enterprise sap 15 SP6
3.20.0-150200.3.15.2
fixed
suse enterprise sap 15 SP7
3.20.0-150200.3.15.2
fixed
suse enterprise server 15 SP4
3.20.0-150200.3.15.2
fixed
suse enterprise server 15 SP5
3.20.0-150200.3.15.2
fixed
suse enterprise server 15 SP6
3.20.0-150200.3.15.2
fixed
suse enterprise server 15 SP7
3.20.0-150200.3.15.2
fixed
beust-jcommander
suse enterprise desktop 15 SP7
1.83-150200.3.15.1
fixed
suse enterprise sap 15 SP4
1.83-150200.3.15.1
fixed
suse enterprise sap 15 SP5
1.83-150200.3.15.1
fixed
suse enterprise sap 15 SP6
1.83-150200.3.15.1
fixed
suse enterprise sap 15 SP7
1.83-150200.3.15.1
fixed
suse enterprise server 15 SP4
1.83-150200.3.15.1
fixed
suse enterprise server 15 SP5
1.83-150200.3.15.1
fixed
suse enterprise server 15 SP6
1.83-150200.3.15.1
fixed
suse enterprise server 15 SP7
1.83-150200.3.15.1
fixed
google-guice
suse enterprise desktop 15 SP7
6.0.0-150200.3.13.2
fixed
suse enterprise sap 15 SP4
6.0.0-150200.3.13.2
fixed
suse enterprise sap 15 SP5
6.0.0-150200.3.13.2
fixed
suse enterprise sap 15 SP6
6.0.0-150200.3.13.2
fixed
suse enterprise sap 15 SP7
6.0.0-150200.3.13.2
fixed
suse enterprise server 15 SP4
6.0.0-150200.3.13.2
fixed
suse enterprise server 15 SP5
6.0.0-150200.3.13.2
fixed
suse enterprise server 15 SP6
6.0.0-150200.3.13.2
fixed
suse enterprise server 15 SP7
6.0.0-150200.3.13.2
fixed
guava
suse enterprise desktop 15 SP7
33.2.1-150200.3.15.1
fixed
suse enterprise sap 15 SP4
33.2.1-150200.3.15.1
fixed
suse enterprise sap 15 SP5
33.2.1-150200.3.15.1
fixed
suse enterprise sap 15 SP6
33.2.1-150200.3.15.1
fixed
suse enterprise sap 15 SP7
33.2.1-150200.3.15.1
fixed
suse enterprise server 15 SP4
33.2.1-150200.3.15.1
fixed
suse enterprise server 15 SP5
33.2.1-150200.3.15.1
fixed
suse enterprise server 15 SP6
33.2.1-150200.3.15.1
fixed
suse enterprise server 15 SP7
33.2.1-150200.3.15.1
fixed
jansi
suse enterprise desktop 15 SP7
2.4.0-150200.3.9.1
fixed
suse enterprise sap 15 SP4
2.4.0-150200.3.9.1
fixed
suse enterprise sap 15 SP5
2.4.0-150200.3.9.1
fixed
suse enterprise sap 15 SP6
2.4.0-150200.3.9.1
fixed
suse enterprise sap 15 SP7
2.4.0-150200.3.9.1
fixed
suse enterprise server 15 SP4
2.4.0-150200.3.9.1
fixed
suse enterprise server 15 SP5
2.4.0-150200.3.9.1
fixed
suse enterprise server 15 SP6
2.4.0-150200.3.9.1
fixed
suse enterprise server 15 SP7
2.4.0-150200.3.9.1
fixed
maven
suse enterprise desktop 15 SP7
3.9.16-150200.4.33.1
fixed
suse enterprise sap 15 SP4
3.9.16-150200.4.33.1
fixed
suse enterprise sap 15 SP5
3.9.16-150200.4.33.1
fixed
suse enterprise sap 15 SP6
3.9.16-150200.4.33.1
fixed
suse enterprise sap 15 SP7
3.9.16-150200.4.33.1
fixed
suse enterprise server 15 SP4
3.9.16-150200.4.33.1
fixed
suse enterprise server 15 SP5
3.9.16-150200.4.33.1
fixed
suse enterprise server 15 SP6
3.9.16-150200.4.33.1
fixed
suse enterprise server 15 SP7
3.9.16-150200.4.33.1
fixed
maven-lib
suse enterprise desktop 15 SP7
3.9.16-150200.4.33.1
fixed
suse enterprise sap 15 SP4
3.9.16-150200.4.33.1
fixed
suse enterprise sap 15 SP5
3.9.16-150200.4.33.1
fixed
suse enterprise sap 15 SP6
3.9.16-150200.4.33.1
fixed
suse enterprise sap 15 SP7
3.9.16-150200.4.33.1
fixed
suse enterprise server 15 SP4
3.9.16-150200.4.33.1
fixed
suse enterprise server 15 SP5
3.9.16-150200.4.33.1
fixed
suse enterprise server 15 SP6
3.9.16-150200.4.33.1
fixed
suse enterprise server 15 SP7
3.9.16-150200.4.33.1
fixed
maven-resolver-api
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
maven-resolver-connector-basic
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
maven-resolver-impl
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
maven-resolver-named-locks
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
maven-resolver-spi
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
maven-resolver-transport-file
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
maven-resolver-transport-http
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
maven-resolver-transport-wagon
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
maven-resolver-util
suse enterprise desktop 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise sap 15 SP7
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP4
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP5
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP6
1.9.27-150200.3.29.1
fixed
suse enterprise server 15 SP7
1.9.27-150200.3.29.1
fixed
plexus-interpolation
suse enterprise desktop 15 SP7
1.27.0-150200.3.9.1
fixed
suse enterprise sap 15 SP4
1.27.0-150200.3.9.1
fixed
suse enterprise sap 15 SP5
1.27.0-150200.3.9.1
fixed
suse enterprise sap 15 SP6
1.27.0-150200.3.9.1
fixed
suse enterprise sap 15 SP7
1.27.0-150200.3.9.1
fixed
suse enterprise server 15 SP4
1.27.0-150200.3.9.1
fixed
suse enterprise server 15 SP5
1.27.0-150200.3.9.1
fixed
suse enterprise server 15 SP6
1.27.0-150200.3.9.1
fixed
suse enterprise server 15 SP7
1.27.0-150200.3.9.1
fixed
plexus-xml
suse enterprise desktop 15 SP7
3.0.1-150200.5.10.1
fixed
suse enterprise sap 15 SP4
3.0.1-150200.5.10.1
fixed
suse enterprise sap 15 SP5
3.0.1-150200.5.10.1
fixed
suse enterprise sap 15 SP6
3.0.1-150200.5.10.1
fixed
suse enterprise sap 15 SP7
3.0.1-150200.5.10.1
fixed
suse enterprise server 15 SP4
3.0.1-150200.5.10.1
fixed
suse enterprise server 15 SP5
3.0.1-150200.5.10.1
fixed
suse enterprise server 15 SP6
3.0.1-150200.5.10.1
fixed
suse enterprise server 15 SP7
3.0.1-150200.5.10.1
fixed
xmvn
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
xmvn-api
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
xmvn-connector
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
xmvn-core
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
xmvn-install
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
xmvn-minimal
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
xmvn-mojo
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
xmvn-resolve
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
xmvn-subst
suse enterprise desktop 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise sap 15 SP7
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP4
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP5
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP6
4.3.0-150200.3.30.1
fixed
suse enterprise server 15 SP7
4.3.0-150200.3.30.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
apache-commons-lang3
Amazon Linux 2023
0:3.18.0-1.amzn2023.0.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
apache-commons-lang3
Azure Linux 3.0
0:3.8.1-6.azl3
fixed
CBL-Mariner 2.0
0:3.8.1-6.cm2
fixed
Common Weakness Enumeration
References
https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1
http://www.openwall.com/lists/oss-security/2025/07/11/1
https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html
https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html