[From nobody Sun Sep 13 04:35:05 2026 Received: (at 1138632-close) by bugs.debian.org; 13 Sep 2026 03:33:48 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 69; hammy, 150; neutral, 207; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:53966) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x5ayR-00D8z0-2k for 1138632-close@bugs.debian.org; Sun, 13 Sep 2026 03:33:48 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x5ayR-003eUu-0Y for 1138632-close@bugs.debian.org; Sun, 13 Sep 2026 03:33:47 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=J+M2keygFZB5fV0DsvQoUvnP0Jqugjc21JlfMmD+NW4=; b=idH2XHsq1whPjehRhMhvETNUvR ARJXPTa5HX1CDIEN5Gj5Imzmd3y3eqQpz+jzeH0oDOTfkAtqVO7Nq7eb7ciz5IMiSNmmFKhES+M6j GQPIS266yhrV1Oj38Pky3LdkTNgtZzdywgdQAGagn5cmc5lAV9jk6wXvUXRzVdzu3tKIaBlYIbIfS KP4/xHSfsLr4+go5iwyV54o+TLkHIOnLiKIRpBxbXb45iDTyOvbCjRBIomrwIUf8356domhk1MCf1 S5S4ysrZbDFxgdYvTT16TNwQteIxYl2GiFF20+DjodoHIczEOWXwLwBHc8DmHqK0sKdaNGMwJk7i1 cr7jUftQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x5ayQ-00000006pqv-1Rp0; Sun, 13 Sep 2026 03:33:46 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?b?SsOpcsO0bWUgQ2hhcmFvdWk=?= <jerome@riseup.net> To: 1138632-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: logback Debian: DAK Debian-Changes: logback_1.6.3-1_source.changes Debian-Source: logback Debian-Version: 1:1.6.3-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138632: fixed in logback 1:1.6.3-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6098899491258337714==" Message-Id: <E1x5ayQ-00000006pqv-1Rp0@fasolo.debian.org> Date: Sun, 13 Sep 2026 03:33:46 +0000 --===============6098899491258337714== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: logback Source-Version: 1:1.6.3-1 Done: J=C3=A9r=C3=B4me Charaoui <jerome@riseup.net> We believe that the bug you reported is fixed in the latest version of logback, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138632@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. J=C3=A9r=C3=B4me Charaoui <jerome@riseup.net> (supplier of updated logback pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 12 Sep 2026 21:01:00 -0400 Source: logback Architecture: source Version: 1:1.6.3-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian= .org> Changed-By: J=C3=A9r=C3=B4me Charaoui <jerome@riseup.net> Closes: 1091319 1091320 1126748 1138632 1139180 1140922 1146719 Changes: logback (1:1.6.3-1) unstable; urgency=3Dmedium . * Team upload. * New upstream version 1.6.3, fixes CVE-2026-19880, CVE-2026-13006, CVE-2026-10532, CVE-2026-9828, CVE-2026-1225, CVE-2025-11226, CVE-2026-1225, CVE-2024-12801, CVE-2024-12798 (Closes: #1146719, #114092= 2, #1139180, #1138632, #1126748, #1091320, #1091319) - The logback-access module is no longer part of the upstream project, a= nd will instead available via the new logback-access source package, see = ITP #1146286. * update poms * refresh maven rules * drop obsolete lintian overrides * d/control: build with headless jdk * d/control: update build dependencies * d/control: add liblogback-access-java to Suggests * d/copyright: drop obsolete Files-Excluded stanza * d/copyright: refresh upstream copyright per LICENSE.txt * d/copyright: upstream switch to EPL-2.0 * d/NEWS: add entry about logback-access split * d/patches: drop obsolete patches * d/patches: new patch to use older jansi package * d/upstream: add metadata * d/watch: update to v5 format * Remove redundant Priority: optional from source stanza. * Removed Rules-Requires-Root * Update standards version to 4.7.4, no changes needed. Checksums-Sha1: 3fcdbfe728bd4b854e424cc8af739b5774b81570 1501 logback_1.6.3-1.dsc a33cdcd844ad78821a0fe2a9d0b7ae842e3aeb5e 581848 logback_1.6.3.orig.tar.xz ef7c277792396a74709751c119ee002b7dda1f63 11664 logback_1.6.3-1.debian.tar.xz a81c70cc5c219903aed85221e95e2db959029903 10967 logback_1.6.3-1_amd64.buildin= fo Checksums-Sha256: 62c2dd5927e15e8531300cdd24f592192457d9d22d285ecdc27685efaa401796 1501 logbac= k_1.6.3-1.dsc 9c971ebb0dd62936a671677868dc1845cd4a1596f360fcf08732886941eec1db 581848 logb= ack_1.6.3.orig.tar.xz 7907eccc8216dcfff25dcdf97dd8943cc7f364f2b69daa4c0d9444a2c48bac22 11664 logba= ck_1.6.3-1.debian.tar.xz dd182d59f783b2aba5821265ba752504fbc89ab7af14d696089f95882507a335 10967 logba= ck_1.6.3-1_amd64.buildinfo Files: f3a509ced2a453ac51e8c2f3f5e972b1 1501 java optional logback_1.6.3-1.dsc 945ffe907d4a89388ddf02875c54ca68 581848 java optional logback_1.6.3.orig.tar= .xz e9bef2aee264173c75036c5275081a8e 11664 java optional logback_1.6.3-1.debian.= tar.xz ece5d76203c866ebb8c5a733785a8790 10967 java optional logback_1.6.3-1_amd64.b= uildinfo -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQTAq04Rv2xblqv/eu5pxS9ljpiFQgUCaqYXFgAKCRBpxS9ljpiF QrshAP9a6EQ5kXGAwx0T8wyJ6CjpK//whEVihp69zxb/4/NIewD/Z0vcQbAXGJOY ADZga36BTG4F2Y31wjr4II8SG2WJDAk=3D =3DzSSw -----END PGP SIGNATURE----- --===============6098899491258337714== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaqYZmgAKCRCb9qggYcy5 IcrtAP47E/hL6S2tUPOMtWR9WQJDhiO0D9nIEm/umcMbqfT4vwD+NDtiLwMDvg/8 582DDUnUfTe9lyPT5GEUaoQuI5UvJAQ= =QiAh -----END PGP SIGNATURE----- --===============6098899491258337714==-- ]