This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/commons-lang.git
commit 52343c5bec231bc2ae47f89375c6b98c0c04de98 Author: Gary Gregory <[email protected]> AuthorDate: Wed May 27 16:03:52 2026 -0400 [LANG-1801] RandomStringUtils.random() does not strictly validate start/end when chars != null, causing potential IndexOutOfBoundsException --- src/changes/changes.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index 2a74b9f57..3fe540233 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -172,6 +172,7 @@ java.lang.NullPointerException: Cannot invoke <action type="fix" dev="ggregory" due-to="Omkhar Arasaratnam, Gary Gregory">FastTimeZone.getGmtTimeZone() Javadoc promises null on no-match; regex always matches (#1674).</action> <action type="fix" dev="ggregory" due-to="Omkhar Arasaratnam, Gary Gregory">Range.readObject() does not null-check comparator, minimum, or maximum (#1675).</action> <action type="fix" dev="ggregory" due-to="Gary Gregory">Make the StopWatch more reliable for tracking nanos, adjust suspend test (#1677).</action> + <action issue="LANG-1801" type="fix" dev="ggregory" due-to="Zhongxin Yan, Gary Gregory">RandomStringUtils.random() does not strictly validate start and end (#1682).</action> <!-- ADD --> <action type="add" dev="ggregory" due-to="Gary Gregory">Add JavaVersion.JAVA_27.</action> <action type="add" dev="ggregory" due-to="Gary Gregory">Add SystemUtils.IS_JAVA_27.</action>
