USN-8364-1

Details

It was discovered that Apache Commons Lang incorrectly handled recursion in the ClassUtils.getClass method. An attacker could possibly use this issue to cause Apache Commons Lang to crash, resulting in a denial of service.

Affected Packages(12 packages)

libcommons-lang-java

Ubuntu 22.04 LTS

Fixed in:

2.6-9ubuntu0.22.04.1

libcommons-lang3-java

Ubuntu 22.04 LTS

Fixed in:

3.11-1ubuntu0.1

libcommons-lang-java

Ubuntu 24.04 LTS

Fixed in:

2.6-10ubuntu0.1

libcommons-lang-java

Ubuntu Pro 14.04 LTS

Fixed in:

2.6-3ubuntu2+esm1

libcommons-lang3-java

Ubuntu Pro 14.04 LTS

Fixed in:

3.2.1-1ubuntu0.1~esm1

libcommons-lang-java

Ubuntu Pro 16.04 LTS

Fixed in:

2.6-6ubuntu2+esm1

libcommons-lang3-java

Ubuntu Pro 16.04 LTS

Fixed in:

3.4-1ubuntu0.1~esm1

libcommons-lang-java

Ubuntu Pro 18.04 LTS

Fixed in:

2.6-8ubuntu0.1~esm1

libcommons-lang3-java

Ubuntu Pro 18.04 LTS

Fixed in:

3.8-1~18.04.2+esm1

libcommons-lang-java

Ubuntu Pro 20.04 LTS

Fixed in:

2.6-9ubuntu0.20.04.1~esm1

References

REPORT

https://ubuntu.com/security/CVE-2025-48924

ADVISORY

https://ubuntu.com/security/notices/USN-8364-1