logback (1:1.2.11-6) unstable; urgency=medium * Drop liblogback-java-doc binary package (Closes: #1088126) Low popcon, no reverse dependencies, see Debian bug #1087361. * Freshen years in debian/copyright * Bump Standards-Version to 4.7.0 -- tony mancill Sun, 24 Nov 2024 18:07:56 -0800 logback (1:1.2.11-5) unstable; urgency=medium * Add patch for CVE-2023-6378 (Closes: #1057423) -- tony mancill Mon, 04 Dec 2023 22:42:09 -0800 logback (1:1.2.11-4) unstable; urgency=medium * Add clean target for back-to-back builds (Closes: #1048763) * Bump Standards-Version to 4.6.2 (no changes) * Set Rules-Requires-Root: no in debian/control * Add lintian overrides for long lines in sources -- tony mancill Sun, 20 Aug 2023 10:01:07 -0700 logback (1:1.2.11-3) unstable; urgency=medium * Team upload. * Revert switch to libtomcat10-java. (Closes: #1034855) -- Markus Koschany Sat, 27 May 2023 17:17:59 +0200 logback (1:1.2.11-2) unstable; urgency=medium * Team upload. * Migrate to Tomcat 10. Depend on libtomcat10-java instead of tomcat9-java. Add tomcat10-migration.patch. -- Markus Koschany Sun, 05 Mar 2023 01:43:23 +0100 logback (1:1.2.11-1) unstable; urgency=medium * New upstream version 1.2.11 - Backported fix for StackOverflowError (LOGBACK-1027) - Fixed incorrect String cast in JNDIUtil (LOGBACK-1604) - Empty username in SMTPAppenderBase treated as null. (LOGBACK-1594) -- tony mancill Tue, 22 Mar 2022 20:36:14 -0700 logback (1:1.2.10-1) unstable; urgency=medium * New upstream version 1.2.10 Corrects an error message when Groovy is used for configuration. See https://jira.qos.ch/browse/LOGBACK-1601 -- tony mancill Thu, 23 Dec 2021 10:01:01 -0800 logback (1:1.2.9-1) unstable; urgency=medium * New upstream version 1.2.9 - Only allow 'java:' namespace in JNDI lookups - Additional hardening * Drop build-dependency on libgmavenplus-java -- tony mancill Mon, 20 Dec 2021 07:11:23 -0800 logback (1:1.2.8-1) unstable; urgency=high * New upstream version 1.2.8 to address JNDI vunerability See https://jira.qos.ch/browse/LOGBACK-1591 -- tony mancill Wed, 15 Dec 2021 11:38:27 -0800 logback (1:1.2.7-1) unstable; urgency=medium * New upstream release 1.2.7 * Bump Standards-Version to 4.6.0; no changes necessary * Freshen years in debian/copyright -- tony mancill Mon, 29 Nov 2021 07:54:48 -0800 logback (1:1.2.3-6) unstable; urgency=medium * Team upload. * Fixed the build failure with gmavenplus 1.8 * Build depend on libservlet-api-java instead of libservlet3.1-java * Track and download the new releases from GitHub * Standards-Version updated to 4.5.1 * Switch to debhelper level 13 -- Emmanuel Bourg Thu, 04 Feb 2021 01:44:31 +0100 logback (1:1.2.3-5) unstable; urgency=medium * Team upload. * Fixed the compatibility with Jetty 9.4 -- Emmanuel Bourg Mon, 10 Dec 2018 22:22:11 +0100 logback (1:1.2.3-4) unstable; urgency=medium * Team upload. * Depend on libtomcat9-java instead of libtomcat8-java -- Emmanuel Bourg Mon, 03 Dec 2018 21:42:43 +0100 logback (1:1.2.3-3) unstable; urgency=medium * Team upload. * Fixed the build failure with Java 11 (Closes: #911183) * Removed Damien Raude-Morvan from the uploaders (Closes: #889387) * Standards-Version updated to 4.2.1 * Switch to debhelper level 11 * Use salsa.debian.org Vcs-* URLs -- Emmanuel Bourg Sun, 11 Nov 2018 01:10:52 +0100 logback (1:1.2.3-2) unstable; urgency=medium * Team upload. * Freshen debian/copyright for current upstream * Bump Standards-Version to 4.1.2 * Add myself to Uploaders * Use https for Homepage URL * Upload to unstable after building r-deps. -- tony mancill Thu, 30 Nov 2017 19:21:55 -0800 logback (1:1.2.3-1) experimental; urgency=medium * Team upload. * New upstream version 1.2.3 * Disable and clean-up unused patches * Add build-dep on libgmavenplus-java * No longer rename javax.servlet-api artifact in debian/maven.rules * Add ant-junit and maven-cal10n-plugin to maven.ignoreRules * Update groupId of org.hsqldb in maven.ignoreRules -- tony mancill Tue, 28 Nov 2017 19:52:38 -0800 logback (1:1.1.9-5) unstable; urgency=medium * Team upload. * Add wagon-ssh to maven.ignoreRules (Closes: #882472) * Address privacy disclosure (external URL) in documentation HTML * Bump Standards-Version to 4.1.1 -- tony mancill Sun, 26 Nov 2017 18:59:24 -0800 logback (1:1.1.9-4) unstable; urgency=medium * Team upload. * Build and ship logback-access: + Un-ignore the logback-access artifact. + Patch logback-access to comply with the servlet 3.1 API (upstream commit 9ad7cc6141). + B-D on tomcat 8 and jetty 9 and force Debian's versions in d/maven.rules. * Bump Standards to 4.0.0; no changes needed. -- Apollon Oikonomopoulos Thu, 29 Jun 2017 21:00:47 +0300 logback (1:1.1.9-3) unstable; urgency=medium * Team upload. * The patch for CVE-2017-5929 was incomplete. Add CVE-2017-5929-part2.patch and really fix the issue. (Closes: #857343) * Remove all test cases from CVE-2017-5929.patch and only apply the minimal changes to make it easier to review the package. Tests are disabled anyway. -- Markus Koschany Tue, 04 Apr 2017 14:49:44 +0200 logback (1:1.1.9-2) unstable; urgency=medium * Team upload. * Fix CVE-2017-5929: It was discovered that logback, a flexible logging library for Java, would deserialize data from untrusted sockets. This issue has been resolved by adding a whitelist to use only trusted classes. (Closes: #857343) Thanks to Fabrice Dagorn for the report. -- Markus Koschany Tue, 28 Mar 2017 17:22:37 +0200 logback (1:1.1.9-1) unstable; urgency=medium * Team upload. * New upstream release -- Emmanuel Bourg Mon, 23 Jan 2017 18:30:07 +0100 logback (1:1.1.8-1) unstable; urgency=medium * Team upload. * New upstream release * Build with Maven instead of Ant * Removed the Google ads from the documentation * Switch to debhelper level 10 -- Emmanuel Bourg Sun, 11 Dec 2016 22:34:52 +0100 logback (1:1.1.7-2) unstable; urgency=medium * Team upload. * Depend on groovy instead of groovy2 -- Emmanuel Bourg Fri, 20 May 2016 14:24:54 +0200 logback (1:1.1.7-1) unstable; urgency=medium * Team upload. * New upstream release * Standards-Version updated to 3.9.8 (no changes) -- Emmanuel Bourg Sun, 24 Apr 2016 19:12:30 +0200 logback (1:1.1.6-1) unstable; urgency=medium * Team upload. * New upstream release - Depend on libslf4j-java (>= 1.7.18) * Standards-Version updated to 3.9.7 (no changes) * Use secure Vcs-* URLs * Set the locale when generating the Javadoc to make the build reproducible -- Emmanuel Bourg Tue, 22 Mar 2016 08:25:12 +0100 logback (1:1.1.3-2) unstable; urgency=medium * Team upload. * Transition to Groovy 2 -- Emmanuel Bourg Fri, 31 Jul 2015 11:16:18 +0200 logback (1:1.1.3-1) unstable; urgency=medium * Team upload. * New upstream release * Replaced the build dependency on glassfish-javaee with dependencies on libmail-java, libservlet3.1-java and libgeronimo-jms-1.1-spec-java * Standards-Version updated to 3.9.6 (no changes) * Moved the package to Git -- Emmanuel Bourg Wed, 29 Apr 2015 14:10:04 +0200 logback (1:1.1.2-1) unstable; urgency=medium * Team upload. * New upstream release * debian/orig-tar.sh: Remove the non repacked tarball -- Emmanuel Bourg Mon, 28 Apr 2014 12:25:36 +0200 logback (1:1.1.1-1) unstable; urgency=medium * Team upload. * New upstream release * Use XZ compression for the upstream tarball * Standards-Version updated to 3.9.5 (no changes) * debian/watch: Match all the upstream releases * debian/rules: Improved the clean target -- Emmanuel Bourg Mon, 17 Feb 2014 09:04:05 +0100 logback (1:1.0.13-1) unstable; urgency=low * New upstream release. * d/control: Bump Standards-Version to 3.9.4 (no changes needed). * d/control: Use canonical URL for Vcs-* fields. * d/control: Tighten dependencies to libjanino-java (>= 2.6.0). * d/control: Add Build-Depends on libjansi-java no need to Depends, because it's windows only runtime dependency. -- Damien Raude-Morvan Fri, 16 Aug 2013 10:08:55 +0200 logback (1:1.0.4-1) unstable; urgency=low * New upstream release. * d/control: Update Standards-Version to 3.9.3: no changes needed. * d/copyright: Upgrade to copyright-format 1.0. -- Damien Raude-Morvan Tue, 05 Jun 2012 00:11:13 +0200 logback (1:1.0.0-1) unstable; urgency=low * New upstream release. -- Damien Raude-Morvan Tue, 01 Nov 2011 23:33:55 +0100 logback (1:0.9.30-1) unstable; urgency=low * New upstream release. * Wrap and sort Build-Depends and Depends. * Update Standards-Version: 3.9.2 (no changes needed). * d/copyright: Update to latest DEP-5 format. -- Damien Raude-Morvan Thu, 22 Sep 2011 13:59:23 +0200 logback (1:0.9.28-1) unstable; urgency=low * New upstream release. * Update Standards-Version: 3.9.1 (no changes needed). * d/control: Add Build-Depends on groovy. * d/rules: Add groovy to DEB_JARS. -- Damien Raude-Morvan Fri, 04 Mar 2011 23:09:14 +0100 logback (1:0.9.18+dak1-1) unstable; urgency=low * Revert to 0.9.18 release. - 0.9.20 as incompatible API changes: upstream removed methods in StaticLoggerBinder which cause FTBFS on red5 package (See: #577859). -- Damien Raude-Morvan Mon, 26 Apr 2010 22:03:01 +0200 logback (0.9.20-1) unstable; urgency=low * Team upload * New upstream release * Change 'maintainers' into 'Maintainers'. * Switch to source format 3.0. * Update Standards-Version: 3.8.4 -- Torsten Werner Sun, 11 Apr 2010 21:12:47 +0200 logback (0.9.18-1) unstable; urgency=low * New upstream release. - Now dual-licensed under the EPL 1.0 and LGPL 2.1 - Update debian/copyright * Bump debhelper version to >= 7 * Extract debian/rules get-orig-source script into debian/orig-tar.sh and debian/orig-tar.exclude -- Damien Raude-Morvan Thu, 03 Dec 2009 23:24:54 +0100 logback (0.9.17-1) unstable; urgency=low * New upstream release. * Set Maintainer field to Debian Java Team * Add myself as Uploaders * Build-Depends on default-jdk instead of default-jdk-builddep because we don't build a native GCJ package. * Bump Standards-Version to 3.8.3 (no changes needed) * Documentation: - Move api documentation to /usr/share/doc/liblogback-java/api/ - Register Logback manual with doc-base * Maven POMs: - Add a Build-Depends-Indep dependency on maven-repo-helper - Use mh_installpoms and mh_installjar to install the POM and the jar to the Maven repository -- Damien Raude-Morvan Fri, 25 Sep 2009 00:19:01 +0200 logback (0.9.15-1) unstable; urgency=low * Initial release. (Closes: #506569) -- Damien Raude-Morvan Sun, 15 Mar 2009 20:43:52 +0100