logback (1:1.2.11-6build1) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Graham Inggs <ginggs@ubuntu.com>  Thu, 22 Jan 2026 13:11:03 +0000

logback (1:1.2.11-6) unstable; urgency=medium

  * Drop liblogback-java-doc binary package (Closes: #1088126)
    Low popcon, no reverse dependencies, see Debian bug #1087361.
  * Freshen years in debian/copyright
  * Bump Standards-Version to 4.7.0

 -- tony mancill <tmancill@debian.org>  Sun, 24 Nov 2024 18:07:56 -0800

logback (1:1.2.11-5) unstable; urgency=medium

  * Add patch for CVE-2023-6378 (Closes: #1057423)

 -- tony mancill <tmancill@debian.org>  Mon, 04 Dec 2023 22:42:09 -0800

logback (1:1.2.11-4) unstable; urgency=medium

  * Add clean target for back-to-back builds (Closes: #1048763)
  * Bump Standards-Version to 4.6.2 (no changes)
  * Set Rules-Requires-Root: no in debian/control
  * Add lintian overrides for long lines in sources

 -- tony mancill <tmancill@debian.org>  Sun, 20 Aug 2023 10:01:07 -0700

logback (1:1.2.11-3) unstable; urgency=medium

  * Team upload.
  * Revert switch to libtomcat10-java. (Closes: #1034855)

 -- Markus Koschany <apo@debian.org>  Sat, 27 May 2023 17:17:59 +0200

logback (1:1.2.11-2) unstable; urgency=medium

  * Team upload.
  * Migrate to Tomcat 10. Depend on libtomcat10-java instead of tomcat9-java.
    Add tomcat10-migration.patch.

 -- Markus Koschany <apo@debian.org>  Sun, 05 Mar 2023 01:43:23 +0100

logback (1:1.2.11-1) unstable; urgency=medium

  * New upstream version 1.2.11
    - Backported fix for StackOverflowError (LOGBACK-1027)
    - Fixed incorrect String cast in JNDIUtil (LOGBACK-1604)
    - Empty username in SMTPAppenderBase treated as null. (LOGBACK-1594)

 -- tony mancill <tmancill@debian.org>  Tue, 22 Mar 2022 20:36:14 -0700

logback (1:1.2.10-1) unstable; urgency=medium

  * New upstream version 1.2.10
    Corrects an error message when Groovy is used for configuration.
    See https://jira.qos.ch/browse/LOGBACK-1601

 -- tony mancill <tmancill@debian.org>  Thu, 23 Dec 2021 10:01:01 -0800

logback (1:1.2.9-1) unstable; urgency=medium

  * New upstream version 1.2.9
    - Only allow 'java:' namespace in JNDI lookups
    - Additional hardening
  * Drop build-dependency on libgmavenplus-java

 -- tony mancill <tmancill@debian.org>  Mon, 20 Dec 2021 07:11:23 -0800

logback (1:1.2.8-1) unstable; urgency=high

  * New upstream version 1.2.8 to address JNDI vunerability
    See https://jira.qos.ch/browse/LOGBACK-1591

 -- tony mancill <tmancill@debian.org>  Wed, 15 Dec 2021 11:38:27 -0800

logback (1:1.2.7-1) unstable; urgency=medium

  * New upstream release 1.2.7
  * Bump Standards-Version to 4.6.0; no changes necessary
  * Freshen years in debian/copyright

 -- tony mancill <tmancill@debian.org>  Mon, 29 Nov 2021 07:54:48 -0800

logback (1:1.2.3-6) unstable; urgency=medium

  * Team upload.
  * Fixed the build failure with gmavenplus 1.8
  * Build depend on libservlet-api-java instead of libservlet3.1-java
  * Track and download the new releases from GitHub
  * Standards-Version updated to 4.5.1
  * Switch to debhelper level 13

 -- Emmanuel Bourg <ebourg@apache.org>  Thu, 04 Feb 2021 01:44:31 +0100

logback (1:1.2.3-5) unstable; urgency=medium

  * Team upload.
  * Fixed the compatibility with Jetty 9.4

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 10 Dec 2018 22:22:11 +0100

logback (1:1.2.3-4) unstable; urgency=medium

  * Team upload.
  * Depend on libtomcat9-java instead of libtomcat8-java

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 03 Dec 2018 21:42:43 +0100

logback (1:1.2.3-3) unstable; urgency=medium

  * Team upload.
  * Fixed the build failure with Java 11 (Closes: #911183)
  * Removed Damien Raude-Morvan from the uploaders (Closes: #889387)
  * Standards-Version updated to 4.2.1
  * Switch to debhelper level 11
  * Use salsa.debian.org Vcs-* URLs

 -- Emmanuel Bourg <ebourg@apache.org>  Sun, 11 Nov 2018 01:10:52 +0100

logback (1:1.2.3-2) unstable; urgency=medium

  * Team upload.
  * Freshen debian/copyright for current upstream
  * Bump Standards-Version to 4.1.2
  * Add myself to Uploaders
  * Use https for Homepage URL
  * Upload to unstable after building r-deps.

 -- tony mancill <tmancill@debian.org>  Thu, 30 Nov 2017 19:21:55 -0800

logback (1:1.2.3-1) experimental; urgency=medium

  * Team upload.
  * New upstream version 1.2.3
  * Disable and clean-up unused patches
  * Add build-dep on libgmavenplus-java
  * No longer rename javax.servlet-api artifact in debian/maven.rules
  * Add ant-junit and maven-cal10n-plugin to maven.ignoreRules
  * Update groupId of org.hsqldb in maven.ignoreRules

 -- tony mancill <tmancill@debian.org>  Tue, 28 Nov 2017 19:52:38 -0800

logback (1:1.1.9-5) unstable; urgency=medium

  * Team upload.
  * Add wagon-ssh to maven.ignoreRules (Closes: #882472)
  * Address privacy disclosure (external URL) in documentation HTML
  * Bump Standards-Version to 4.1.1

 -- tony mancill <tmancill@debian.org>  Sun, 26 Nov 2017 18:59:24 -0800

logback (1:1.1.9-4) unstable; urgency=medium

  * Team upload.
  * Build and ship logback-access:
    + Un-ignore the logback-access artifact.
    + Patch logback-access to comply with the servlet 3.1 API (upstream commit
      9ad7cc6141).
    + B-D on tomcat 8 and jetty 9 and force Debian's versions in
      d/maven.rules.
  * Bump Standards to 4.0.0; no changes needed.

 -- Apollon Oikonomopoulos <apoikos@debian.org>  Thu, 29 Jun 2017 21:00:47 +0300

logback (1:1.1.9-3) unstable; urgency=medium

  * Team upload.
  * The patch for CVE-2017-5929 was incomplete. Add CVE-2017-5929-part2.patch
    and really fix the issue. (Closes: #857343)
  * Remove all test cases from CVE-2017-5929.patch and only apply the minimal
    changes to make it easier to review the package. Tests are disabled anyway.

 -- Markus Koschany <apo@debian.org>  Tue, 04 Apr 2017 14:49:44 +0200

logback (1:1.1.9-2) unstable; urgency=medium

  * Team upload.
  * Fix CVE-2017-5929:
    It was discovered that logback, a flexible logging library for Java, would
    deserialize data from untrusted sockets. This issue has been resolved by
    adding a whitelist to use only trusted classes. (Closes: #857343)
    Thanks to Fabrice Dagorn for the report.

 -- Markus Koschany <apo@debian.org>  Tue, 28 Mar 2017 17:22:37 +0200

logback (1:1.1.9-1) unstable; urgency=medium

  * Team upload.
  * New upstream release

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 23 Jan 2017 18:30:07 +0100

logback (1:1.1.8-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
  * Build with Maven instead of Ant
  * Removed the Google ads from the documentation
  * Switch to debhelper level 10

 -- Emmanuel Bourg <ebourg@apache.org>  Sun, 11 Dec 2016 22:34:52 +0100

logback (1:1.1.7-2) unstable; urgency=medium

  * Team upload.
  * Depend on groovy instead of groovy2

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 20 May 2016 14:24:54 +0200

logback (1:1.1.7-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
  * Standards-Version updated to 3.9.8 (no changes)

 -- Emmanuel Bourg <ebourg@apache.org>  Sun, 24 Apr 2016 19:12:30 +0200

logback (1:1.1.6-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Depend on libslf4j-java (>= 1.7.18)
  * Standards-Version updated to 3.9.7 (no changes)
  * Use secure Vcs-* URLs
  * Set the locale when generating the Javadoc to make the build reproducible

 -- Emmanuel Bourg <ebourg@apache.org>  Tue, 22 Mar 2016 08:25:12 +0100

logback (1:1.1.3-2) unstable; urgency=medium

  * Team upload.
  * Transition to Groovy 2

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 31 Jul 2015 11:16:18 +0200

logback (1:1.1.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
  * Replaced the build dependency on glassfish-javaee with dependencies on
    libmail-java, libservlet3.1-java and libgeronimo-jms-1.1-spec-java
  * Standards-Version updated to 3.9.6 (no changes)
  * Moved the package to Git

 -- Emmanuel Bourg <ebourg@apache.org>  Wed, 29 Apr 2015 14:10:04 +0200

logback (1:1.1.2-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
  * debian/orig-tar.sh: Remove the non repacked tarball

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 28 Apr 2014 12:25:36 +0200

logback (1:1.1.1-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
  * Use XZ compression for the upstream tarball
  * Standards-Version updated to 3.9.5 (no changes)
  * debian/watch: Match all the upstream releases
  * debian/rules: Improved the clean target

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 17 Feb 2014 09:04:05 +0100

logback (1:1.0.13-1) unstable; urgency=low

  * New upstream release.
  * d/control: Bump Standards-Version to 3.9.4 (no changes needed).
  * d/control: Use canonical URL for Vcs-* fields.
  * d/control: Tighten dependencies to libjanino-java (>= 2.6.0).
  * d/control: Add Build-Depends on libjansi-java
    no need to Depends, because it's windows only runtime dependency.

 -- Damien Raude-Morvan <drazzib@debian.org>  Fri, 16 Aug 2013 10:08:55 +0200

logback (1:1.0.4-1) unstable; urgency=low

  * New upstream release.
  * d/control: Update Standards-Version to 3.9.3: no changes needed.
  * d/copyright: Upgrade to copyright-format 1.0.

 -- Damien Raude-Morvan <drazzib@debian.org>  Tue, 05 Jun 2012 00:11:13 +0200

logback (1:1.0.0-1) unstable; urgency=low

  * New upstream release.

 -- Damien Raude-Morvan <drazzib@debian.org>  Tue, 01 Nov 2011 23:33:55 +0100

logback (1:0.9.30-1) unstable; urgency=low

  * New upstream release.
  * Wrap and sort Build-Depends and Depends.
  * Update Standards-Version: 3.9.2 (no changes needed).
  * d/copyright: Update to latest DEP-5 format.

 -- Damien Raude-Morvan <drazzib@debian.org>  Thu, 22 Sep 2011 13:59:23 +0200

logback (1:0.9.28-1) unstable; urgency=low

  * New upstream release.
  * Update Standards-Version: 3.9.1 (no changes needed).
  * d/control: Add Build-Depends on groovy.
  * d/rules: Add groovy to DEB_JARS.

 -- Damien Raude-Morvan <drazzib@debian.org>  Fri, 04 Mar 2011 23:09:14 +0100

logback (1:0.9.18+dak1-1) unstable; urgency=low

  * Revert to 0.9.18 release.
    - 0.9.20 as incompatible API changes:
      upstream removed methods in StaticLoggerBinder
      which cause FTBFS on red5 package (See: #577859).

 -- Damien Raude-Morvan <drazzib@debian.org>  Mon, 26 Apr 2010 22:03:01 +0200

logback (0.9.20-1) unstable; urgency=low

  * Team upload
  * New upstream release
  * Change 'maintainers' into 'Maintainers'.
  * Switch to source format 3.0.
  * Update Standards-Version: 3.8.4

 -- Torsten Werner <twerner@debian.org>  Sun, 11 Apr 2010 21:12:47 +0200

logback (0.9.18-1) unstable; urgency=low

  * New upstream release.
    - Now dual-licensed under the EPL 1.0 and LGPL 2.1
    - Update debian/copyright
  * Bump debhelper version to >= 7
  * Extract debian/rules get-orig-source script into debian/orig-tar.sh
    and debian/orig-tar.exclude

 -- Damien Raude-Morvan <drazzib@debian.org>  Thu, 03 Dec 2009 23:24:54 +0100

logback (0.9.17-1) unstable; urgency=low

  * New upstream release.
  * Set Maintainer field to Debian Java Team
  * Add myself as Uploaders
  * Build-Depends on default-jdk instead of default-jdk-builddep
    because we don't build a native GCJ package.
  * Bump Standards-Version to 3.8.3 (no changes needed)
  * Documentation:
    - Move api documentation to /usr/share/doc/liblogback-java/api/
    - Register Logback manual with doc-base
  * Maven POMs:
    - Add a Build-Depends-Indep dependency on maven-repo-helper
    - Use mh_installpoms and mh_installjar to install the POM and the jar to the
     Maven repository

 -- Damien Raude-Morvan <drazzib@debian.org>  Fri, 25 Sep 2009 00:19:01 +0200

logback (0.9.15-1) unstable; urgency=low

  * Initial release. (Closes: #506569)

 -- Damien Raude-Morvan <drazzib@drazzib.com>  Sun, 15 Mar 2009 20:43:52 +0100
