Control: tags 1106746 + patch
Control: tags 1106746 + pending
Dear maintainer,
I've prepared an NMU for commons-beanutils (versioned as 1.10.1-1.1) and uploaded it to DELAYED/2. Please feel free to tell me if I should cancel it.
cu
Adrian
diffstat for commons-beanutils-1.10.1 commons-beanutils-1.10.1
changelog | 7
patches/0001-Add-org.apache.commons.beanutils.SuppressPropertiesB.patch | 99 ++++++++++
patches/series | 1
3 files changed, 107 insertions(+)
diff -Nru commons-beanutils-1.10.1/debian/changelog commons-beanutils-1.10.1/debian/changelog
--- commons-beanutils-1.10.1/debian/changelog 2025-04-16 15:21:01.000000000 +0300
+++ commons-beanutils-1.10.1/debian/changelog 2025-07-17 16:01:37.000000000 +0300
@@ -1,3 +1,10 @@
+commons-beanutils (1.10.1-1.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * CVE-2025-48734: Improper access control (Closes: #1106746)
+
+ -- Adrian Bunk <
[email protected]> Thu, 17 Jul 2025 16:01:37 +0300
+
commons-beanutils (1.10.1-1) unstable; urgency=medium
* New upstream release
diff -Nru commons-beanutils-1.10.1/debian/patches/0001-Add-org.apache.commons.beanutils.SuppressPropertiesB.patch commons-beanutils-1.10.1/debian/patches/0001-Add-org.apache.commons.beanutils.SuppressPropertiesB.patch
--- commons-beanutils-1.10.1/debian/patches/0001-Add-org.apache.commons.beanutils.SuppressPropertiesB.patch 1970-01-01 02:00:00.000000000 +0200
+++ commons-beanutils-1.10.1/debian/patches/0001-Add-org.apache.commons.beanutils.SuppressPropertiesB.patch 2025-07-17 16:01:37.000000000 +0300
@@ -0,0 +1,99 @@