| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: logback | Distribution: SUSE Linux Enterprise 15 |
| Version: 1.2.8 | Vendor: SUSE LLC <https://www.suse.com/> |
| Release: 3.3.1 | Build date: Fri Dec 17 08:46:32 2021 |
| Group: Unspecified | Build host: sheep58 |
| Size: 763035 | Source RPM: logback-1.2.8-3.3.1.src.rpm |
| Packager: https://www.suse.com/ | |
| Url: https://logback.qos.ch/ | |
| Summary: A Java logging library | |
Logback is intended as a successor to the popular log4j project. At present time, logback is divided into three modules, logback-core, logback-classic and logback-access. The logback-core module lays the groundwork for the other two modules. The logback-classic module can be assimilated to a significantly improved version of log4j. Moreover, logback-classic natively implements the SLF4J API so that you can readily switch back and forth between logback and other logging frameworks such as log4j or java.util.logging (JUL). The logback-access module integrates with Servlet containers, such as Tomcat and Jetty, to provide HTTP-access log functionality. Note that you could easily build your own module on top of logback-core.
EPL-1.0 OR LGPL-2.1-or-later
* Thu Dec 16 2021 fstrba@suse.com
- Upgrade to version 1.2.8 (bsc#1193795)
* Changes of version 1.2.8
+ In response to LOGBACK-1591, all JNDI lookup code in logback
has been disabled until further notice. This impacts
ContextJNDISelector and <insertFromJNDI> element in
configuration files.
+ Also in response to LOGBACK-1591, all database (JDBC) related
code in the project has been removed with no replacement.
+ Note that the vulnerability mentioned in LOGBACK-1591 requires
write access to logback's configuration file as a
prerequisite. The log4Shell/CVE-2021-44228 and LOGBACK-1591
are of different severity levels. A successful RCE requires
all of the following conditions to be met:
- write access to logback.xml
- use of versions < 1.2.8
- reloading of poisoned configuration data, which implies
application restart or scan="true" set prior to attack
+ As an additional extra precaution, in addition to upgrading to
logback version 1.2.8, the users are advised to set their
logback configuration files as read-only.
* Changes of version 1.2.7
+ Added hostnameVerification to property SSLSocketAppender.
This fixes LOGBACK-1574.
* Changes of version 1.2.6
+ To prevent XML eXternal Entity injection (XXE) attacks, Joran
no longer reads external entities passed in XML files. This
fixes LOGBACK-1465.
* Changes of version 1.2.5
+ Instead of an Appender, the LayoutWrappingEncoder now accepts
a variable of type ContextAware as a parent. This fixes
LOGBACK-1326.
* Changes of version 1.2.4
+ Added support for minimum length in %i filename pattern. This
fixes LOGBACK-1248.
+ For size bound log file archiving, allow
TimeBasedArchiveRemove to remove files with indexes containing
upto 5 digits. This fixes LOGBACK-1175.
+ Added %prefix composite converter which automatically prefixes
child converter output with the name of the converter. This
feature is quite handy in environments where log files need to
be parsed and monitored.
- Changed patch:
* logback-1.1.11-jetty.patch -> logback-1.2.8-jetty.patch
+ Rediff to changed context
* Fri Nov 29 2019 fstrba@suse.com
- Do not force building with java < 9
- Specify maven.compiler.release=8 to access the
java.util.function.Supplier API, introduced in java 8
- Added patch:
* logback-1.2.3-getCallerClass.patch
+ Access the sun.reflect.Reflection.getCallerClass by
reflection, in order to be able to build with jdk >= 9
* Sun Nov 17 2019 fstrba@suse.com
- Initial packaging of logback 1.2.3
/usr/share/doc/packages/logback /usr/share/doc/packages/logback/README.md /usr/share/java/logback /usr/share/java/logback/logback-classic.jar /usr/share/java/logback/logback-core.jar /usr/share/licenses/logback /usr/share/licenses/logback/LICENSE.txt /usr/share/maven-metadata/logback.xml /usr/share/maven-poms/logback /usr/share/maven-poms/logback/logback-classic.pom /usr/share/maven-poms/logback/logback-core.pom /usr/share/maven-poms/logback/logback-parent.pom
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Apr 9 17:06:41 2024