This is an automated email from the ASF dual-hosted git repository.
henrib pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-jexl.git
The following commit(s) were added to refs/heads/master by this push:
new edbf94b9 JEXL-462 : release notes, etc.
edbf94b9 is described below
commit edbf94b9faa779a0e9d03a66e6565b6bd1e22b12
Author: Henrib <[email protected]>
AuthorDate: Wed Jun 24 18:31:58 2026 +0200
JEXL-462 : release notes, etc.
---
RELEASE-NOTES.txt | 33 +++++++++++++++++++++++++++++++++
src/changes/changes.xml | 1 +
src/site/xdoc/relnotes.xml | 25 ++++++++++++++++++++++---
3 files changed, 56 insertions(+), 3 deletions(-)
diff --git a/RELEASE-NOTES.txt b/RELEASE-NOTES.txt
index beb0eef0..d0ebc2e6 100644
--- a/RELEASE-NOTES.txt
+++ b/RELEASE-NOTES.txt
@@ -1,3 +1,36 @@
+Apache Commons JEXL 3.6.4 Release Notes
+---------------------------------------
+
+The Apache Commons JEXL team is pleased to announce the release of Apache
Commons JEXL 3.6.4.
+
+Introduction
+------------
+
+Apache Commons JEXL is a library that enables scripting features in Java
applications and frameworks..
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+
+Fixed Bugs
+----------
+
+o JEXL-462: JexlPermissions.RESTRICTED must ensure a better level of
isolation.
+
+
+Historical list of changes:
https://commons.apache.org/proper/commons-jexl/changes.html
+
+For complete information on Apache Commons JEXL, including instructions on how
to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons JEXL website:
+
+https://commons.apache.org/proper/commons-jexl/
+
+Download page: https://commons.apache.org/proper/commons-jexl/download_jexl.cgi
+
+Have fun!
+-Apache Commons Team
+
+------------------------------------------------------------------------------
+
Apache Commons JEXL 3.6.3 Release Notes
---------------------------------------
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 2a336af7..08f7b3d3 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -29,6 +29,7 @@
<body>
<release version="3.6.4" date="YYYY-MM-DD" description="This is a
feature and maintenance release. Java 8 or later is required.">
<!-- FIX -->
+ <action dev="henrib" type="fix"
issue="JEXL-462">JexlPermissions.RESTRICTED must ensure a better level of
isolation.</action>
<!-- ADD -->
<!-- UPDATE -->
</release>
diff --git a/src/site/xdoc/relnotes.xml b/src/site/xdoc/relnotes.xml
index 99b53562..d9b9808f 100644
--- a/src/site/xdoc/relnotes.xml
+++ b/src/site/xdoc/relnotes.xml
@@ -18,13 +18,13 @@
<document>
<properties>
- <title>Apache Commons JEXL 3.6.3 Release Notes</title>
+ <title>Apache Commons JEXL 3.6.4 Release Notes</title>
</properties>
<body>
<section name="Compatibility with previous release">
<p>
- Version 3.6.3 is source and binary compatible with 3.6.0.
+ Version 3.6.4 is source and binary compatible with 3.6.0.
</p>
</section>
<section name="Compatibility with older releases (< 3.3, 2.x)">
@@ -50,7 +50,26 @@
</p>
</section>
- <section name="What is new in 3.6.3:">
+ <section name="What is new in 3.6.4:">
+ <p>
+ JEXL 3.6.4 is a minor release that fixes a security issue in the
RESTRICTED permission set.
+ It does not introduce any breaking change.
+ </p>
+ </section>
+ <section name="Bugs fixed in 3.6.4:">
+ <p>
+ <table>
+ <tr>
+ <td>
+ <a
href="https://issues.apache.org/jira/browse/JEXL-462";>JEXL-462:</a>
+ </td>
+ <td>JexlPermissions.RESTRICTED must ensure a better level of
isolation.</td>
+ </tr>
+ </table>
+ </p>
+ </section>
+
+ <section name="What was new in 3.6.3:">
<p>
JEXL 3.6.3 is a minor release that fixes some bugs.
It does not introduce any breaking change.
