logback (1:1.2.11-3) unstable; urgency=medium
* Team upload.
* Revert switch to libtomcat10-java. (Closes: #1034855)
-- Markus Koschany <apo@debian.org> Sat, 27 May 2023 17:17:59 +0200
logback (1:1.2.11-2) unstable; urgency=medium
* Team upload.
* Migrate to Tomcat 10. Depend on libtomcat10-java instead of tomcat9-java.
Add tomcat10-migration.patch.
-- Markus Koschany <apo@debian.org> Sun, 05 Mar 2023 01:43:23 +0100
logback (1:1.2.11-1) unstable; urgency=medium
* New upstream version 1.2.11
- Backported fix for StackOverflowError (LOGBACK-1027)
- Fixed incorrect String cast in JNDIUtil (LOGBACK-1604)
- Empty username in SMTPAppenderBase treated as null. (LOGBACK-1594)
-- tony mancill <tmancill@debian.org> Tue, 22 Mar 2022 20:36:14 -0700
logback (1:1.2.10-1) unstable; urgency=medium
* New upstream version 1.2.10
Corrects an error message when Groovy is used for configuration.
See https://jira.qos.ch/browse/LOGBACK-1601
-- tony mancill <tmancill@debian.org> Thu, 23 Dec 2021 10:01:01 -0800
logback (1:1.2.9-1) unstable; urgency=medium
* New upstream version 1.2.9
- Only allow 'java:' namespace in JNDI lookups
- Additional hardening
* Drop build-dependency on libgmavenplus-java
-- tony mancill <tmancill@debian.org> Mon, 20 Dec 2021 07:11:23 -0800
logback (1:1.2.8-1) unstable; urgency=high
* New upstream version 1.2.8 to address JNDI vunerability
See https://jira.qos.ch/browse/LOGBACK-1591
-- tony mancill <tmancill@debian.org> Wed, 15 Dec 2021 11:38:27 -0800
logback (1:1.2.7-1) unstable; urgency=medium
* New upstream release 1.2.7
* Bump Standards-Version to 4.6.0; no changes necessary
* Freshen years in debian/copyright
-- tony mancill <tmancill@debian.org> Mon, 29 Nov 2021 07:54:48 -0800
logback (1:1.2.3-6) unstable; urgency=medium
* Team upload.
* Fixed the build failure with gmavenplus 1.8
* Build depend on libservlet-api-java instead of libservlet3.1-java
* Track and download the new releases from GitHub
* Standards-Version updated to 4.5.1
* Switch to debhelper level 13
-- Emmanuel Bourg <ebourg@apache.org> Thu, 04 Feb 2021 01:44:31 +0100
logback (1:1.2.3-5) unstable; urgency=medium
* Team upload.
* Fixed the compatibility with Jetty 9.4
-- Emmanuel Bourg <ebourg@apache.org> Mon, 10 Dec 2018 22:22:11 +0100
logback (1:1.2.3-4) unstable; urgency=medium
* Team upload.
* Depend on libtomcat9-java instead of libtomcat8-java
-- Emmanuel Bourg <ebourg@apache.org> Mon, 03 Dec 2018 21:42:43 +0100
logback (1:1.2.3-3) unstable; urgency=medium
* Team upload.
* Fixed the build failure with Java 11 (Closes: #911183)
* Removed Damien Raude-Morvan from the uploaders (Closes: #889387)
* Standards-Version updated to 4.2.1
* Switch to debhelper level 11
* Use salsa.debian.org Vcs-* URLs
-- Emmanuel Bourg <ebourg@apache.org> Sun, 11 Nov 2018 01:10:52 +0100
logback (1:1.2.3-2) unstable; urgency=medium
* Team upload.
* Freshen debian/copyright for current upstream
* Bump Standards-Version to 4.1.2
* Add myself to Uploaders
* Use https for Homepage URL
* Upload to unstable after building r-deps.
-- tony mancill <tmancill@debian.org> Thu, 30 Nov 2017 19:21:55 -0800
logback (1:1.2.3-1) experimental; urgency=medium
* Team upload.
* New upstream version 1.2.3
* Disable and clean-up unused patches
* Add build-dep on libgmavenplus-java
* No longer rename javax.servlet-api artifact in debian/maven.rules
* Add ant-junit and maven-cal10n-plugin to maven.ignoreRules
* Update groupId of org.hsqldb in maven.ignoreRules
-- tony mancill <tmancill@debian.org> Tue, 28 Nov 2017 19:52:38 -0800
logback (1:1.1.9-5) unstable; urgency=medium
* Team upload.
* Add wagon-ssh to maven.ignoreRules (Closes: #882472)
* Address privacy disclosure (external URL) in documentation HTML
* Bump Standards-Version to 4.1.1
-- tony mancill <tmancill@debian.org> Sun, 26 Nov 2017 18:59:24 -0800
logback (1:1.1.9-4) unstable; urgency=medium
* Team upload.
* Build and ship logback-access:
+ Un-ignore the logback-access artifact.
+ Patch logback-access to comply with the servlet 3.1 API (upstream commit
9ad7cc6141).
+ B-D on tomcat 8 and jetty 9 and force Debian's versions in
d/maven.rules.
* Bump Standards to 4.0.0; no changes needed.
-- Apollon Oikonomopoulos <apoikos@debian.org> Thu, 29 Jun 2017 21:00:47 +0300
logback (1:1.1.9-3) unstable; urgency=medium
* Team upload.
* The patch for CVE-2017-5929 was incomplete. Add CVE-2017-5929-part2.patch
and really fix the issue. (Closes: #857343)
* Remove all test cases from CVE-2017-5929.patch and only apply the minimal
changes to make it easier to review the package. Tests are disabled anyway.
-- Markus Koschany <apo@debian.org> Tue, 04 Apr 2017 14:49:44 +0200
logback (1:1.1.9-2) unstable; urgency=medium
* Team upload.
* Fix CVE-2017-5929:
It was discovered that logback, a flexible logging library for Java, would
deserialize data from untrusted sockets. This issue has been resolved by
adding a whitelist to use only trusted classes. (Closes: #857343)
Thanks to Fabrice Dagorn for the report.
-- Markus Koschany <apo@debian.org> Tue, 28 Mar 2017 17:22:37 +0200
logback (1:1.1.9-1) unstable; urgency=medium
* Team upload.
* New upstream release
-- Emmanuel Bourg <ebourg@apache.org> Mon, 23 Jan 2017 18:30:07 +0100
logback (1:1.1.8-1) unstable; urgency=medium
* Team upload.
* New upstream release
* Build with Maven instead of Ant
* Removed the Google ads from the documentation
* Switch to debhelper level 10
-- Emmanuel Bourg <ebourg@apache.org> Sun, 11 Dec 2016 22:34:52 +0100
logback (1:1.1.7-2) unstable; urgency=medium
* Team upload.
* Depend on groovy instead of groovy2
-- Emmanuel Bourg <ebourg@apache.org> Fri, 20 May 2016 14:24:54 +0200
logback (1:1.1.7-1) unstable; urgency=medium
* Team upload.
* New upstream release
* Standards-Version updated to 3.9.8 (no changes)
-- Emmanuel Bourg <ebourg@apache.org> Sun, 24 Apr 2016 19:12:30 +0200
logback (1:1.1.6-1) unstable; urgency=medium
* Team upload.
* New upstream release
- Depend on libslf4j-java (>= 1.7.18)
* Standards-Version updated to 3.9.7 (no changes)
* Use secure Vcs-* URLs
* Set the locale when generating the Javadoc to make the build reproducible
-- Emmanuel Bourg <ebourg@apache.org> Tue, 22 Mar 2016 08:25:12 +0100
logback (1:1.1.3-2) unstable; urgency=medium
* Team upload.
* Transition to Groovy 2
-- Emmanuel Bourg <ebourg@apache.org> Fri, 31 Jul 2015 11:16:18 +0200
logback (1:1.1.3-1) unstable; urgency=medium
* Team upload.
* New upstream release
* Replaced the build dependency on glassfish-javaee with dependencies on
libmail-java, libservlet3.1-java and libgeronimo-jms-1.1-spec-java
* Standards-Version updated to 3.9.6 (no changes)
* Moved the package to Git
-- Emmanuel Bourg <ebourg@apache.org> Wed, 29 Apr 2015 14:10:04 +0200
logback (1:1.1.2-1) unstable; urgency=medium
* Team upload.
* New upstream release
* debian/orig-tar.sh: Remove the non repacked tarball
-- Emmanuel Bourg <ebourg@apache.org> Mon, 28 Apr 2014 12:25:36 +0200
logback (1:1.1.1-1) unstable; urgency=medium
* Team upload.
* New upstream release
* Use XZ compression for the upstream tarball
* Standards-Version updated to 3.9.5 (no changes)
* debian/watch: Match all the upstream releases
* debian/rules: Improved the clean target
-- Emmanuel Bourg <ebourg@apache.org> Mon, 17 Feb 2014 09:04:05 +0100
logback (1:1.0.13-1) unstable; urgency=low
* New upstream release.
* d/control: Bump Standards-Version to 3.9.4 (no changes needed).
* d/control: Use canonical URL for Vcs-* fields.
* d/control: Tighten dependencies to libjanino-java (>= 2.6.0).
* d/control: Add Build-Depends on libjansi-java
no need to Depends, because it's windows only runtime dependency.
-- Damien Raude-Morvan <drazzib@debian.org> Fri, 16 Aug 2013 10:08:55 +0200
logback (1:1.0.4-1) unstable; urgency=low
* New upstream release.
* d/control: Update Standards-Version to 3.9.3: no changes needed.
* d/copyright: Upgrade to copyright-format 1.0.
-- Damien Raude-Morvan <drazzib@debian.org> Tue, 05 Jun 2012 00:11:13 +0200
logback (1:1.0.0-1) unstable; urgency=low
* New upstream release.
-- Damien Raude-Morvan <drazzib@debian.org> Tue, 01 Nov 2011 23:33:55 +0100
logback (1:0.9.30-1) unstable; urgency=low
* New upstream release.
* Wrap and sort Build-Depends and Depends.
* Update Standards-Version: 3.9.2 (no changes needed).
* d/copyright: Update to latest DEP-5 format.
-- Damien Raude-Morvan <drazzib@debian.org> Thu, 22 Sep 2011 13:59:23 +0200
logback (1:0.9.28-1) unstable; urgency=low
* New upstream release.
* Update Standards-Version: 3.9.1 (no changes needed).
* d/control: Add Build-Depends on groovy.
* d/rules: Add groovy to DEB_JARS.
-- Damien Raude-Morvan <drazzib@debian.org> Fri, 04 Mar 2011 23:09:14 +0100
logback (1:0.9.18+dak1-1) unstable; urgency=low
* Revert to 0.9.18 release.
- 0.9.20 as incompatible API changes:
upstream removed methods in StaticLoggerBinder
which cause FTBFS on red5 package (See: #577859).
-- Damien Raude-Morvan <drazzib@debian.org> Mon, 26 Apr 2010 22:03:01 +0200
logback (0.9.20-1) unstable; urgency=low
* Team upload
* New upstream release
* Change 'maintainers' into 'Maintainers'.
* Switch to source format 3.0.
* Update Standards-Version: 3.8.4
-- Torsten Werner <twerner@debian.org> Sun, 11 Apr 2010 21:12:47 +0200
logback (0.9.18-1) unstable; urgency=low
* New upstream release.
- Now dual-licensed under the EPL 1.0 and LGPL 2.1
- Update debian/copyright
* Bump debhelper version to >= 7
* Extract debian/rules get-orig-source script into debian/orig-tar.sh
and debian/orig-tar.exclude
-- Damien Raude-Morvan <drazzib@debian.org> Thu, 03 Dec 2009 23:24:54 +0100
logback (0.9.17-1) unstable; urgency=low
* New upstream release.
* Set Maintainer field to Debian Java Team
* Add myself as Uploaders
* Build-Depends on default-jdk instead of default-jdk-builddep
because we don't build a native GCJ package.
* Bump Standards-Version to 3.8.3 (no changes needed)
* Documentation:
- Move api documentation to /usr/share/doc/liblogback-java/api/
- Register Logback manual with doc-base
* Maven POMs:
- Add a Build-Depends-Indep dependency on maven-repo-helper
- Use mh_installpoms and mh_installjar to install the POM and the jar to the
Maven repository
-- Damien Raude-Morvan <drazzib@debian.org> Fri, 25 Sep 2009 00:19:01 +0200
logback (0.9.15-1) unstable; urgency=low
* Initial release. (Closes: #506569)
-- Damien Raude-Morvan <drazzib@drazzib.com> Sun, 15 Mar 2009 20:43:52 +0100