CVE catalog
CVE-2025-48924
Apache Commons Lang vulnerability
- Severity
- Medium · CVSS 4.7
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.63% · Oct 25, 2026
Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a StackOverflowError could cause an application to stop. Users are recommended to upgrade to version 3.18.0, which fixes the issue.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | libcommons-lang-java | sid | 2.6-12 | fixed |
| Debian | libcommons-lang-java | forky | 2.6-12 | fixed |
| Debian | libcommons-lang-java | trixie | 2.6-10+deb13u1 | fixed |
| Debian | libcommons-lang-java | bookworm | 2.6-10+deb12u1 | fixed |
| Debian | libcommons-lang3-java | sid | 3.21.0-1 | fixed |
| Debian | libcommons-lang3-java | forky | 3.20.0-1 | fixed |
| Debian | libcommons-lang3-java | trixie | 3.17.0-1+deb13u1 | fixed |
| Debian | libcommons-lang3-java | bookworm | 3.12.0-2+deb12u1 | fixed |
| Ubuntu | libcommons-lang-java | noble | 2.6-10ubuntu0.1 | fixed |
| Ubuntu | libcommons-lang3-java | noble | 3.14.0-1ubuntu0.1~esm1 | fixed |
| Ubuntu | libcommons-lang-java-doc | noble | 2.6-10ubuntu0.1 | fixed |
| Suse | apache-commons-compress | linux enterprise module for basesystem 15 sp7 | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise module for basesystem 15 sp7 | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise module for development tools 15 sp7 | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise module for development tools 15 sp7 | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise module for development tools 15 sp7 | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise module for development tools 15 sp7 | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise module for development tools 15 sp7 | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise module for development tools 15 sp7 | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise module for development tools 15 sp7 | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise module for development tools 15 sp7 | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise module for development tools 15 sp7 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise module for development tools 15 sp7 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise module for development tools 15 sp7 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise module for development tools 15 sp7 | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise high performance computing 15 sp4-espos | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise high performance computing 15 sp4-espos | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise high performance computing 15 sp4-espos | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise high performance computing 15 sp4-espos | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise high performance computing 15 sp4-espos | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise high performance computing 15 sp4-espos | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise high performance computing 15 sp4-espos | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise high performance computing 15 sp4-espos | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise high performance computing 15 sp4-espos | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise high performance computing 15 sp4-espos | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise high performance computing 15 sp4-espos | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise high performance computing 15 sp4-espos | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise high performance computing 15 sp4-espos | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise high performance computing 15 sp4-espos | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise high performance computing 15 sp4-ltss | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise high performance computing 15 sp4-ltss | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise high performance computing 15 sp4-ltss | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise high performance computing 15 sp4-ltss | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise high performance computing 15 sp4-ltss | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise high performance computing 15 sp4-ltss | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise high performance computing 15 sp4-ltss | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise high performance computing 15 sp4-ltss | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise high performance computing 15 sp4-ltss | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise high performance computing 15 sp4-ltss | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise high performance computing 15 sp4-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise high performance computing 15 sp4-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise high performance computing 15 sp4-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise high performance computing 15 sp4-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise high performance computing 15 sp5-espos | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise high performance computing 15 sp5-espos | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise high performance computing 15 sp5-espos | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise high performance computing 15 sp5-espos | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise high performance computing 15 sp5-espos | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise high performance computing 15 sp5-espos | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise high performance computing 15 sp5-espos | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise high performance computing 15 sp5-espos | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise high performance computing 15 sp5-espos | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise high performance computing 15 sp5-espos | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise high performance computing 15 sp5-espos | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise high performance computing 15 sp5-espos | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise high performance computing 15 sp5-espos | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise high performance computing 15 sp5-espos | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise high performance computing 15 sp5-ltss | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise high performance computing 15 sp5-ltss | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise high performance computing 15 sp5-ltss | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise high performance computing 15 sp5-ltss | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise high performance computing 15 sp5-ltss | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise high performance computing 15 sp5-ltss | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise high performance computing 15 sp5-ltss | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise high performance computing 15 sp5-ltss | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise high performance computing 15 sp5-ltss | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise high performance computing 15 sp5-ltss | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise high performance computing 15 sp5-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise high performance computing 15 sp5-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise high performance computing 15 sp5-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise high performance computing 15 sp5-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise server 15 sp4-ltss | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise server 15 sp4-ltss | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise server 15 sp4-ltss | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise server 15 sp4-ltss | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise server 15 sp4-ltss | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise server 15 sp4-ltss | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise server 15 sp4-ltss | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise server 15 sp4-ltss | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise server 15 sp4-ltss | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise server 15 sp4-ltss | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise server 15 sp4-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise server 15 sp4-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise server 15 sp4-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise server 15 sp4-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise server 15 sp5-ltss | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise server 15 sp5-ltss | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise server 15 sp5-ltss | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise server 15 sp5-ltss | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise server 15 sp5-ltss | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise server 15 sp5-ltss | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise server 15 sp5-ltss | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise server 15 sp5-ltss | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise server 15 sp5-ltss | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise server 15 sp5-ltss | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise server 15 sp5-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise server 15 sp5-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise server 15 sp5-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise server 15 sp5-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise server 15 sp6-ltss | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise server 15 sp6-ltss | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise server 15 sp6-ltss | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise server 15 sp6-ltss | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise server 15 sp6-ltss | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise server 15 sp6-ltss | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise server 15 sp6-ltss | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise server 15 sp6-ltss | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise server 15 sp6-ltss | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise server 15 sp6-ltss | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise server 15 sp6-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise server 15 sp6-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise server 15 sp6-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise server 15 sp6-ltss | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise server for sap applications 15 sp4 | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise server for sap applications 15 sp4 | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise server for sap applications 15 sp4 | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise server for sap applications 15 sp4 | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise server for sap applications 15 sp4 | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise server for sap applications 15 sp4 | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise server for sap applications 15 sp4 | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise server for sap applications 15 sp4 | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise server for sap applications 15 sp4 | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise server for sap applications 15 sp4 | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise server for sap applications 15 sp4 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise server for sap applications 15 sp4 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise server for sap applications 15 sp4 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise server for sap applications 15 sp4 | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise server for sap applications 15 sp5 | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise server for sap applications 15 sp5 | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise server for sap applications 15 sp5 | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise server for sap applications 15 sp5 | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise server for sap applications 15 sp5 | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise server for sap applications 15 sp5 | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise server for sap applications 15 sp5 | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise server for sap applications 15 sp5 | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise server for sap applications 15 sp5 | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise server for sap applications 15 sp5 | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise server for sap applications 15 sp5 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise server for sap applications 15 sp5 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise server for sap applications 15 sp5 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise server for sap applications 15 sp5 | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-compress | linux enterprise server for sap applications 15 sp6 | 1.28.0-150200.3.21.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise server for sap applications 15 sp6 | 3.20.0-150200.3.15.2 | fixed |
| Suse | beust-jcommander | linux enterprise server for sap applications 15 sp6 | 1.83-150200.3.15.1 | fixed |
| Suse | google-guice | linux enterprise server for sap applications 15 sp6 | 6.0.0-150200.3.13.2 | fixed |
| Suse | guava | linux enterprise server for sap applications 15 sp6 | 33.2.1-150200.3.15.1 | fixed |
| Suse | jansi | linux enterprise server for sap applications 15 sp6 | 2.4.0-150200.3.9.1 | fixed |
| Suse | maven | linux enterprise server for sap applications 15 sp6 | 3.9.16-150200.4.33.1 | fixed |
| Suse | maven-resolver | linux enterprise server for sap applications 15 sp6 | 1.9.27-150200.3.29.1 | fixed |
| Suse | plexus-interpolation | linux enterprise server for sap applications 15 sp6 | 1.27.0-150200.3.9.1 | fixed |
| Suse | plexus-xml | linux enterprise server for sap applications 15 sp6 | 3.0.1-150200.5.10.1 | fixed |
| Suse | xmvn | linux enterprise server for sap applications 15 sp6 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-connector | linux enterprise server for sap applications 15 sp6 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-mojo | linux enterprise server for sap applications 15 sp6 | 4.3.0-150200.3.30.1 | fixed |
| Suse | xmvn-tools | linux enterprise server for sap applications 15 sp6 | 4.3.0-150200.3.30.1 | fixed |
| Suse | apache-commons-cli | linux enterprise server 16.0 | 1.11.0-160000.1.1 | fixed |
| Suse | apache-commons-codec | linux enterprise server 16.0 | 1.22.0-160000.1.1 | fixed |
| Suse | apache-commons-configuration2 | linux enterprise server 16.0 | 2.15.0-160000.1.1 | fixed |
| Suse | apache-commons-io | linux enterprise server 16.0 | 2.22.0-160000.1.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise server 16.0 | 3.20.0-160000.1.1 | fixed |
| Suse | apache-commons-text | linux enterprise server 16.0 | 1.15.0-160000.1.1 | fixed |
| Suse | apache-commons-cli | linux enterprise server for sap applications 16.0 | 1.11.0-160000.1.1 | fixed |
| Suse | apache-commons-codec | linux enterprise server for sap applications 16.0 | 1.22.0-160000.1.1 | fixed |
| Suse | apache-commons-configuration2 | linux enterprise server for sap applications 16.0 | 2.15.0-160000.1.1 | fixed |
| Suse | apache-commons-io | linux enterprise server for sap applications 16.0 | 2.22.0-160000.1.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise server for sap applications 16.0 | 3.20.0-160000.1.1 | fixed |
| Suse | apache-commons-text | linux enterprise server for sap applications 16.0 | 1.15.0-160000.1.1 | fixed |
| Ubuntu | libcommons-lang-java | pro | 2.6-8 | vulnerable |
| Ubuntu | libcommons-lang-java | pro | 2.6-9 | vulnerable |
| Ubuntu | libcommons-lang-java | pro | 2.6-9ubuntu0.20.04.1~esm1 | fixed |
| Ubuntu | libcommons-lang3-java | pro | 3.12.0-2 | vulnerable |
| Ubuntu | libcommons-lang3-java | pro | 3.13.0-1 | vulnerable |
| Ubuntu | libcommons-lang3-java | pro | 3.14.0-1 | vulnerable |
| Ubuntu | libcommons-lang3-java | pro | 3.14.0-1ubuntu0.1~esm1 | fixed |
| Ubuntu | libcommons-lang-java | 22.04 | 2.6-9 | vulnerable |
| Ubuntu | libcommons-lang-java | 22.04 | 2.6-9ubuntu0.22.04.1 | fixed |
| Ubuntu | libcommons-lang3-java | 22.04 | 3.11-1 | vulnerable |
| Ubuntu | libcommons-lang3-java | 22.04 | 3.11-1ubuntu0.1 | fixed |
| Ubuntu | libcommons-lang-java | 24.04 | 2.6-10 | vulnerable |
| Ubuntu | libcommons-lang-java | 24.04 | 2.6-10ubuntu0.1 | fixed |
| Ubuntu | libcommons-lang-java | pro | 2.6-8 | vulnerable |
| Ubuntu | libcommons-lang-java | pro | 2.6-9 | vulnerable |
| Ubuntu | libcommons-lang-java | pro | 2.6-9ubuntu0.20.04.1~esm1 | fixed |
| Ubuntu | libcommons-lang3-java | pro | 3.12.0-2 | vulnerable |
| Ubuntu | libcommons-lang3-java | pro | 3.13.0-1 | vulnerable |
| Ubuntu | libcommons-lang3-java | pro | 3.14.0-1 | vulnerable |
| Ubuntu | libcommons-lang3-java | pro | 3.14.0-1ubuntu0.1~esm1 | fixed |
| Ubuntu | libcommons-lang-java | 22.04 | 2.6-9 | vulnerable |
| Ubuntu | libcommons-lang-java | 22.04 | 2.6-9ubuntu0.22.04.1 | fixed |
| Ubuntu | libcommons-lang3-java | 22.04 | 3.11-1 | vulnerable |
| Ubuntu | libcommons-lang3-java | 22.04 | 3.11-1ubuntu0.1 | fixed |
| Ubuntu | libcommons-lang-java | 24.04 | 2.6-10 | vulnerable |
| Ubuntu | libcommons-lang-java | 24.04 | 2.6-10ubuntu0.1 | fixed |
| Ubuntu | libcommons-lang3-java | 25.10 | 3.17.0-1 | vulnerable |
| Opensuse | apache-commons-configuration2 | tumbleweed | 2.15.0-1.1 | fixed |
| Opensuse | apache-commons-lang3 | tumbleweed | 3.18.0-1.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise module for basesystem 15 sp6 | 3.18.0-150200.3.12.1 | fixed |
| Suse | apache-commons-lang3 | linux enterprise module for basesystem 15 sp7 | 3.18.0-150200.3.12.1 | fixed |
| Suse | apache-commons-lang3 | manager server module 4.3 | 3.18.0-150200.3.12.1 | fixed |
| Opensuse | apache-commons-lang3 | leap 15.6 | 3.18.0-150200.3.12.1 | fixed |
| Suse | apache-commons-lang | linux enterprise module for basesystem 15 sp6 | 2.6-150200.14.3.1 | fixed |
| Suse | apache-commons-lang | linux enterprise module for basesystem 15 sp7 | 2.6-150200.14.3.1 | fixed |
| Opensuse | apache-commons-lang | leap 15.6 | 2.6-150200.14.3.1 | fixed |
| Suse | apache-commons-lang | linux enterprise server ltss extended security 12 sp5 | 2.6-5.3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | libcommons-lang-java | source | sid | 2.6-11 | not yet assigned | Not reported | [1109126] |
| Debian | libcommons-lang-java | source | forky | 2.6-11 | not yet assigned | Not reported | [1109126] |
| Debian | libcommons-lang-java | source | trixie | 2.6-10+deb13u1 | not yet assigned | Not reported | [1109126] |
| Debian | libcommons-lang-java | source | bookworm | 2.6-10+deb12u1 | not yet assigned | Not reported | [1109126] |
| Debian | libcommons-lang3-java | source | sid | 3.17.0-2 | not yet assigned | Not reported | [1109125] |
| Debian | libcommons-lang3-java | source | forky | 3.17.0-2 | not yet assigned | Not reported | [1109125] |
| Debian | libcommons-lang3-java | source | trixie | 3.17.0-1+deb13u1 | not yet assigned | Not reported | [1109125] |
| Debian | libcommons-lang3-java | source | bookworm | 3.12.0-2+deb12u1 | not yet assigned | Not reported | [1109125] |
| Ubuntu | libcommons-lang-java | deb | noble | 2.6-10ubuntu0.1 | Not reported | Not reported | Not reported |
| Ubuntu | libcommons-lang3-java | deb | noble | 3.14.0-1ubuntu0.1~esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libcommons-lang-java-doc | deb | noble | 2.6-10ubuntu0.1 | Not reported | Not reported | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise module for basesystem 15 sp7 | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise module for basesystem 15 sp7 | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise module for development tools 15 sp7 | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise module for development tools 15 sp7 | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise module for development tools 15 sp7 | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise module for development tools 15 sp7 | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise module for development tools 15 sp7 | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise module for development tools 15 sp7 | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise module for development tools 15 sp7 | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise module for development tools 15 sp7 | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise module for development tools 15 sp7 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise module for development tools 15 sp7 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise module for development tools 15 sp7 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise module for development tools 15 sp7 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise high performance computing 15 sp4-espos | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise high performance computing 15 sp4-espos | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise high performance computing 15 sp4-espos | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise high performance computing 15 sp4-espos | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise high performance computing 15 sp4-espos | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise high performance computing 15 sp4-espos | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise high performance computing 15 sp4-espos | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise high performance computing 15 sp4-espos | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise high performance computing 15 sp4-espos | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise high performance computing 15 sp4-espos | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise high performance computing 15 sp4-espos | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise high performance computing 15 sp4-espos | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise high performance computing 15 sp4-espos | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise high performance computing 15 sp4-espos | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise high performance computing 15 sp4-ltss | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise high performance computing 15 sp4-ltss | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise high performance computing 15 sp4-ltss | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise high performance computing 15 sp4-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise high performance computing 15 sp4-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise high performance computing 15 sp4-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise high performance computing 15 sp4-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise high performance computing 15 sp5-espos | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise high performance computing 15 sp5-espos | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise high performance computing 15 sp5-espos | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise high performance computing 15 sp5-espos | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise high performance computing 15 sp5-espos | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise high performance computing 15 sp5-espos | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise high performance computing 15 sp5-espos | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise high performance computing 15 sp5-espos | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise high performance computing 15 sp5-espos | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise high performance computing 15 sp5-espos | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise high performance computing 15 sp5-espos | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise high performance computing 15 sp5-espos | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise high performance computing 15 sp5-espos | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise high performance computing 15 sp5-espos | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise high performance computing 15 sp5-ltss | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise high performance computing 15 sp5-ltss | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise high performance computing 15 sp5-ltss | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise high performance computing 15 sp5-ltss | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise high performance computing 15 sp5-ltss | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise high performance computing 15 sp5-ltss | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise high performance computing 15 sp5-ltss | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise high performance computing 15 sp5-ltss | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise high performance computing 15 sp5-ltss | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise high performance computing 15 sp5-ltss | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise high performance computing 15 sp5-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise high performance computing 15 sp5-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise high performance computing 15 sp5-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise high performance computing 15 sp5-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise server 15 sp4-ltss | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise server 15 sp4-ltss | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise server 15 sp4-ltss | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise server 15 sp4-ltss | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise server 15 sp4-ltss | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise server 15 sp4-ltss | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise server 15 sp4-ltss | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise server 15 sp4-ltss | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise server 15 sp4-ltss | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise server 15 sp4-ltss | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise server 15 sp4-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise server 15 sp4-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise server 15 sp4-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise server 15 sp4-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise server 15 sp5-ltss | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise server 15 sp5-ltss | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise server 15 sp5-ltss | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise server 15 sp5-ltss | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise server 15 sp5-ltss | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise server 15 sp5-ltss | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise server 15 sp5-ltss | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise server 15 sp5-ltss | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise server 15 sp5-ltss | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise server 15 sp5-ltss | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise server 15 sp5-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise server 15 sp5-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise server 15 sp5-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise server 15 sp5-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise server 15 sp6-ltss | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise server 15 sp6-ltss | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise server 15 sp6-ltss | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise server 15 sp6-ltss | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise server 15 sp6-ltss | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise server 15 sp6-ltss | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise server 15 sp6-ltss | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise server 15 sp6-ltss | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise server 15 sp6-ltss | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise server 15 sp6-ltss | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise server 15 sp6-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise server 15 sp6-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise server 15 sp6-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise server 15 sp6-ltss | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise server for sap applications 15 sp4 | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise server for sap applications 15 sp4 | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise server for sap applications 15 sp4 | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise server for sap applications 15 sp4 | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise server for sap applications 15 sp4 | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise server for sap applications 15 sp4 | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise server for sap applications 15 sp4 | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise server for sap applications 15 sp4 | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise server for sap applications 15 sp4 | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise server for sap applications 15 sp4 | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise server for sap applications 15 sp4 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise server for sap applications 15 sp4 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise server for sap applications 15 sp4 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise server for sap applications 15 sp4 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise server for sap applications 15 sp5 | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise server for sap applications 15 sp5 | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise server for sap applications 15 sp5 | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise server for sap applications 15 sp5 | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise server for sap applications 15 sp5 | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise server for sap applications 15 sp5 | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise server for sap applications 15 sp5 | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise server for sap applications 15 sp5 | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise server for sap applications 15 sp5 | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise server for sap applications 15 sp5 | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise server for sap applications 15 sp5 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise server for sap applications 15 sp5 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise server for sap applications 15 sp5 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise server for sap applications 15 sp5 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-compress | rpm | linux enterprise server for sap applications 15 sp6 | 1.28.0-150200.3.21.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise server for sap applications 15 sp6 | 3.20.0-150200.3.15.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | beust-jcommander | rpm | linux enterprise server for sap applications 15 sp6 | 1.83-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | google-guice | rpm | linux enterprise server for sap applications 15 sp6 | 6.0.0-150200.3.13.2 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | guava | rpm | linux enterprise server for sap applications 15 sp6 | 33.2.1-150200.3.15.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | jansi | rpm | linux enterprise server for sap applications 15 sp6 | 2.4.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven | rpm | linux enterprise server for sap applications 15 sp6 | 3.9.16-150200.4.33.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | maven-resolver | rpm | linux enterprise server for sap applications 15 sp6 | 1.9.27-150200.3.29.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-interpolation | rpm | linux enterprise server for sap applications 15 sp6 | 1.27.0-150200.3.9.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | plexus-xml | rpm | linux enterprise server for sap applications 15 sp6 | 3.0.1-150200.5.10.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn | rpm | linux enterprise server for sap applications 15 sp6 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-connector | rpm | linux enterprise server for sap applications 15 sp6 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-mojo | rpm | linux enterprise server for sap applications 15 sp6 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | xmvn-tools | rpm | linux enterprise server for sap applications 15 sp6 | 4.3.0-150200.3.30.1 | Not reported | SUSE-SU-2026:3390-1 | Not reported |
| Suse | apache-commons-cli | rpm | linux enterprise server 16.0 | 1.11.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-codec | rpm | linux enterprise server 16.0 | 1.22.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-configuration2 | rpm | linux enterprise server 16.0 | 2.15.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-io | rpm | linux enterprise server 16.0 | 2.22.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise server 16.0 | 3.20.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-text | rpm | linux enterprise server 16.0 | 1.15.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-cli | rpm | linux enterprise server for sap applications 16.0 | 1.11.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-codec | rpm | linux enterprise server for sap applications 16.0 | 1.22.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-configuration2 | rpm | linux enterprise server for sap applications 16.0 | 2.15.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-io | rpm | linux enterprise server for sap applications 16.0 | 2.22.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise server for sap applications 16.0 | 3.20.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Suse | apache-commons-text | rpm | linux enterprise server for sap applications 16.0 | 1.15.0-160000.1.1 | Not reported | SUSE-SU-2026:21996-1 | Not reported |
| Ubuntu | libcommons-lang-java | deb | pro | 2.6-9ubuntu0.20.04.1~esm1 | Not reported | USN-8364-1 | Not reported |
| Ubuntu | libcommons-lang3-java | deb | pro | 3.14.0-1ubuntu0.1~esm1 | Not reported | USN-8364-1 | Not reported |
| Ubuntu | libcommons-lang-java | deb | 22.04 | 2.6-9ubuntu0.22.04.1 | Not reported | USN-8364-1 | Not reported |
| Ubuntu | libcommons-lang3-java | deb | 22.04 | 3.11-1ubuntu0.1 | Not reported | USN-8364-1 | Not reported |
| Ubuntu | libcommons-lang-java | deb | 24.04 | 2.6-10ubuntu0.1 | Not reported | USN-8364-1 | Not reported |
| Ubuntu | libcommons-lang-java | deb | pro | 2.6-9ubuntu0.20.04.1~esm1 | Not reported | UBUNTU-CVE-2025-48924 | Not reported |
| Ubuntu | libcommons-lang3-java | deb | pro | 3.14.0-1ubuntu0.1~esm1 | Not reported | UBUNTU-CVE-2025-48924 | Not reported |
| Ubuntu | libcommons-lang-java | deb | 22.04 | 2.6-9ubuntu0.22.04.1 | Not reported | UBUNTU-CVE-2025-48924 | Not reported |
| Ubuntu | libcommons-lang3-java | deb | 22.04 | 3.11-1ubuntu0.1 | Not reported | UBUNTU-CVE-2025-48924 | Not reported |
| Ubuntu | libcommons-lang-java | deb | 24.04 | 2.6-10ubuntu0.1 | Not reported | UBUNTU-CVE-2025-48924 | Not reported |
| Opensuse | apache-commons-configuration2 | rpm | tumbleweed | 2.15.0-1.1 | Not reported | OPENSUSE-SU-2026:10784-1 | Not reported |
| Opensuse | apache-commons-lang3 | rpm | tumbleweed | 3.18.0-1.1 | Not reported | OPENSUSE-SU-2025:15347-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise module for basesystem 15 sp6 | 3.18.0-150200.3.12.1 | Not reported | SUSE-SU-2025:02818-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | linux enterprise module for basesystem 15 sp7 | 3.18.0-150200.3.12.1 | Not reported | SUSE-SU-2025:02818-1 | Not reported |
| Suse | apache-commons-lang3 | rpm | manager server module 4.3 | 3.18.0-150200.3.12.1 | Not reported | SUSE-SU-2025:02818-1 | Not reported |
| Opensuse | apache-commons-lang3 | rpm | leap 15.6 | 3.18.0-150200.3.12.1 | Not reported | SUSE-SU-2025:02818-1 | Not reported |
| Suse | apache-commons-lang | rpm | linux enterprise module for basesystem 15 sp6 | 2.6-150200.14.3.1 | Not reported | SUSE-SU-2025:02785-1 | Not reported |
| Suse | apache-commons-lang | rpm | linux enterprise module for basesystem 15 sp7 | 2.6-150200.14.3.1 | Not reported | SUSE-SU-2025:02785-1 | Not reported |
| Opensuse | apache-commons-lang | rpm | leap 15.6 | 2.6-150200.14.3.1 | Not reported | SUSE-SU-2025:02785-1 | Not reported |
| Suse | apache-commons-lang | rpm | linux enterprise server ltss extended security 12 sp5 | 2.6-5.3.1 | Not reported | SUSE-SU-2025:02786-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
Source package: [apache-commons-configuration2]
Details (1)
2.15.1-1.3· noarch · tumbleweedUnknown · Fixed:
2.15.0-1.1Version impact unknown
usn · apache-commons-configuration2 · opensuse · tumbleweed
- [apache-commons-lang3-javadoc]Unknown
Source package: [apache-commons-lang3]
Details (1)
3.20.0-1.3· noarch · tumbleweedUnknown · Fixed:
3.18.0-1.1Version impact unknown
usn · apache-commons-lang3 · opensuse · tumbleweed
Source package: [apache-commons-configuration2]
Details (1)
2.15.1-1.3· noarch · tumbleweedFixed · Fixed:
2.15.0-1.1usn · apache-commons-configuration2 · opensuse · tumbleweed
- [apache-commons-lang3]Fixed
Source package: [apache-commons-lang3]
Details (1)
3.20.0-1.3· noarch · tumbleweedFixed · Fixed:
3.18.0-1.1usn · apache-commons-lang3 · opensuse · tumbleweed
[Debian 12 (Bookworm)]
- [libcommons-lang3-java]Fixed
Details (2)
3.12.0-2+deb12u1· all · bookwormFixed · Fixed:
3.12.0-2+deb12u1usn · libcommons-lang3-java · debian · bookworm; usn · libcommons-lang3-java · debian · 12
3.12.0-2+deb12u1· all · bookwormFixed · Fixed:
3.12.0-2+deb12u1usn · libcommons-lang3-java · debian · bookworm; usn · libcommons-lang3-java · debian · 12
- [libcommons-lang3-java-doc]Fixed
Source package: [libcommons-lang3-java]
Details (2)
3.12.0-2+deb12u1· all · bookwormFixed · Fixed:
3.12.0-2+deb12u1usn · libcommons-lang3-java · debian · bookworm; usn · libcommons-lang3-java · debian · 12
3.12.0-2+deb12u1· all · bookwormFixed · Fixed:
3.12.0-2+deb12u1usn · libcommons-lang3-java · debian · bookworm; usn · libcommons-lang3-java · debian · 12
- [libcommons-lang-java]Fixed
Details (2)
2.6-10+deb12u1· all · bookwormFixed · Fixed:
2.6-10+deb12u1usn · libcommons-lang-java · debian · bookworm; usn · libcommons-lang-java · debian · 12
2.6-10+deb12u1· all · bookwormFixed · Fixed:
2.6-10+deb12u1usn · libcommons-lang-java · debian · bookworm; usn · libcommons-lang-java · debian · 12
- [libcommons-lang-java-doc]Fixed
Source package: [libcommons-lang-java]
Details (2)
2.6-10+deb12u1· all · bookwormFixed · Fixed:
2.6-10+deb12u1usn · libcommons-lang-java · debian · bookworm; usn · libcommons-lang-java · debian · 12
2.6-10+deb12u1· all · bookwormFixed · Fixed:
2.6-10+deb12u1usn · libcommons-lang-java · debian · bookworm; usn · libcommons-lang-java · debian · 12
[Debian 13 (Trixie)]
- [libcommons-lang3-java]Fixed
Details (2)
3.17.0-1+deb13u1· all · trixieFixed · Fixed:
3.17.0-1+deb13u1usn · libcommons-lang3-java · debian · 13
3.17.0-1+deb13u1· all · trixieFixed · Fixed:
3.17.0-1+deb13u1usn · libcommons-lang3-java · debian · 13
- [libcommons-lang-java]Fixed
Details (2)
2.6-10+deb13u1· all · trixieFixed · Fixed:
2.6-10+deb13u1usn · libcommons-lang-java · debian · 13
2.6-10+deb13u1· all · trixieFixed · Fixed:
2.6-10+deb13u1usn · libcommons-lang-java · debian · 13
- [libcommons-lang-java-doc]Fixed
Source package: [libcommons-lang-java]
Details (2)
2.6-10+deb13u1· all · trixieFixed · Fixed:
2.6-10+deb13u1usn · libcommons-lang-java · debian · 13
2.6-10+deb13u1· all · trixieFixed · Fixed:
2.6-10+deb13u1usn · libcommons-lang-java · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3390-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-48924]
- [https://osv.dev/vulnerability/DLA-4262-1]
- [https://osv.dev/vulnerability/DLA-4286-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02785-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02786-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02818-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:21996-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3390-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-48924]
- [https://osv.dev/vulnerability/USN-8364-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:15347-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10784-1]
- [https://security-tracker.debian.org/tracker/CVE-2025-48924]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-48924.json]
- [https://ubuntu.com/security/notices/USN-8364-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1198.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]