[From nobody Fri Nov  6 21:51:06 2026
Received: (at 1149909-close) by bugs.debian.org; 6 Nov 2026 21:49:09 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,
 MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 51; hammy, 150; neutral, 145; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload,
 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo.
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from mitropoulos.debian.org
 ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:59170)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xPRo5-001Cuy-2O for 1149909-close@bugs.debian.org;
 Fri, 06 Nov 2026 21:49:09 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by mitropoulos.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xPRo3-008Fqc-2k for 1149909-close@bugs.debian.org;
 Fri, 06 Nov 2026 21:49:07 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=rNKtYCwJERT2ht/r+aBOXoetZsjg/LgyYWvN6SECYuk=; b=TOfvLGSsrw5QBxlYq6IgQEZCoX
 tq4guz+6C+Qq+gyrh6s6frNrClbn/we1YwMbdZTFh/lJ7dWgrmhjU2C/RW29dJOZCJ7sdz85SHhKO
 F6RIBUJhyDT3rplarnEB20oT5yDv/4LJBCUIHPTDQB/2qbDOcoyPO6NDIs6uF34ZiGeTVR54pRYWU
 SBHFSWd12RiOx8mJYWF9eqQjU3Uf874Pc39N8uydeRGWE2ga2MeSwEpdxD9Ttnmj6klt2rT8qxzaa
 lcVJ6pQGAHJG80Y1mKbD5piUHl1c5xtKvx7BVAwTGCJcaH9I6MgLYlKz7F8jTGq5zitmSPNo33vbj
 S10UWltg==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xPRo2-0000000AJWJ-2iJv; Fri, 06 Nov 2026 21:49:06 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: =?utf-8?b?SsOpcsO0bWUgQ2hhcmFvdWk=?= &lt;jerome@riseup.net&gt;
To: 1149909-close@bugs.debian.org
X-DAK: dak process-upload
X-Debian: DAK
X-Debian-Package: logback
Debian: DAK
Debian-Changes: logback_1.6.6-1_amd64.changes
Debian-Source: logback
Debian-Version: 1:1.6.6-1
Debian-Architecture: source all
Debian-Suite: unstable
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1149909: fixed in logback 1:1.6.6-1
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============8025183593640820874==&quot;
Message-Id: &lt;E1xPRo2-0000000AJWJ-2iJv@fasolo.debian.org&gt;
Date: Fri, 06 Nov 2026 21:49:06 +0000

--===============8025183593640820874==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: logback
Source-Version: 1:1.6.6-1
Done: J=C3=A9r=C3=B4me Charaoui &lt;jerome@riseup.net&gt;

We believe that the bug you reported is fixed in the latest version of
logback, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1149909@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
J=C3=A9r=C3=B4me Charaoui &lt;jerome@riseup.net&gt; (supplier of updated logback pa=
ckage)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 06 Nov 2026 08:49:39 -0500
Source: logback
Binary: liblogback-java
Architecture: source all
Version: 1:1.6.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers &lt;pkg-java-maintainers@lists.alioth.debian=
.org&gt;
Changed-By: J=C3=A9r=C3=B4me Charaoui &lt;jerome@riseup.net&gt;
Description:
 liblogback-java - flexible logging library for Java
Closes: 1149909
Changes:
 logback (1:1.6.6-1) unstable; urgency=3Dmedium
 .
   * Team upload.
   * New upstream version 1.6.6, fixes CVE-2026-104721 (Closes: #1149909)
   * fix dom4j maven ignore rule
Checksums-Sha1:
 b3251267af58f9483ee60be0990c481a8d9b4ff8 1531 logback_1.6.6-1.dsc
 4a3218493f13cc8aa8124a1c47b4b4e110ed89e0 594956 logback_1.6.6.orig.tar.xz
 f4f7099f8ae794e0add8cace878b9160c56c344d 11988 logback_1.6.6-1.debian.tar.xz
 dcc4d89c2446c30d0767b746b2ebe1658f94ed0b 842428 liblogback-java_1.6.6-1_all.=
deb
 5a2d077576cd1a972a24d3bb8c87ea0bf0388c81 13210 logback_1.6.6-1_amd64.buildin=
fo
Checksums-Sha256:
 1453162cdf9efe6596c839e5da4991884db2e24745d556ca5ac3a47b08337f2d 1531 logbac=
k_1.6.6-1.dsc
 d4079f3249bd5d2bec0d7cc8d1c1812c958d9a55afb8401959e85cab00c5777f 594956 logb=
ack_1.6.6.orig.tar.xz
 44b1c898f63765a4748311e298f1487228b03714f3c6fd3cca53f32ce265c154 11988 logba=
ck_1.6.6-1.debian.tar.xz
 e776e53d92dfca242d79de1653f02af735e67ffbefadbe84631c52299b95fcd0 842428 libl=
ogback-java_1.6.6-1_all.deb
 c52500edcc605c3b59576c5cab11c3ad572ab8efde8004300700c981825302e5 13210 logba=
ck_1.6.6-1_amd64.buildinfo
Files:
 0665b111efcfecc81fd7a3b276b4aec8 1531 java optional logback_1.6.6-1.dsc
 b0d8be717361ec682d9dcc44b1e0e011 594956 java optional logback_1.6.6.orig.tar=
.xz
 e6c12ce2fdbe1ef83f6f16ff3bde0766 11988 java optional logback_1.6.6-1.debian.=
tar.xz
 ca859b7944c92d24d3d36be60a80a5e1 842428 java optional liblogback-java_1.6.6-=
1_all.deb
 ad09a00b0a5bdec5a871866ed2fc22d4 13210 java optional logback_1.6.6-1_amd64.b=
uildinfo

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQTAq04Rv2xblqv/eu5pxS9ljpiFQgUCau5G7gAKCRBpxS9ljpiF
QsdqAP956zznTeVAkh5e1wCj1y95Wb7fElUFUBgoPnFBO49/3wEAxE9jhI/hglF9
Jq7YE0IwREla1+Rk29Gp1B3uYaE1XQ0=3D
=3Dppok
-----END PGP SIGNATURE-----


--===============8025183593640820874==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCau5LUgAKCRCb9qggYcy5
IUvjAP4vJAd83l14+HDrKSfjCC6gRIBU4FrVhwfl7kSwvSgk5gEA1arJfA9+m7Cp
WJGyogOwd+Xk7lOeDxKg2SeUUDFFYws=
=uQQf
-----END PGP SIGNATURE-----

--===============8025183593640820874==--
]