logback-1.2.13-150200.3.16.1<>,g`i|p9|'uBZ5`pY3ʎ@9,KP&-jC*>(?(td   6$(Ab      (  X  d  p   @ pl *( L8 T 9 : L F"G" H" I# X#,Y#L\# ]# ^$c b%Jc%d&ue&zf&}l&u& v&w' x' y' z(($(((.(pClogback1.2.13150200.3.16.1A Java logging libraryLogback is intended as a successor to the popular log4j project. At present time, logback is divided into three modules, logback-core, logback-classic and logback-access. The logback-core module lays the groundwork for the other two modules. The logback-classic module can be assimilated to a significantly improved version of log4j. Moreover, logback-classic natively implements the SLF4J API so that you can readily switch back and forth between logback and other logging frameworks such as log4j or java.util.logging (JUL). The logback-access module integrates with Servlet containers, such as Tomcat and Jetty, to provide HTTP-access log functionality. Note that you could easily build your own module on top of logback-core.i|h01-ch3a SUSE Linux Enterprise 15SUSE LLC EPL-1.0 OR LGPL-2.1-or-laterhttps://www.suse.com/Unspecifiedhttps://logback.qos.ch/linuxnoarchWzA% ;A큤A큤A큤A큤i|eii|i|i|i|eii|i|i|i|i|3eb22f300f076fda5113429586cf0589de6e240b0d691ca1bfec59ce97a314ea89b07702ac96b91eef1394b6f0a05e135af0f8e3ae947b28d1f8dc375ad4b08107a669c4a46f51719617aaf6a2e351a5b00ffdb0f8669de1db62e1d15f038a9794a99c6ee7e8b5ba3ef66a1d234c22a55c149e93584040d66a7f6694d552e7ead06aa4d7b4f4dbcefc814cedf11ec1eb7ee835cc2b3e7f25e002189d3b94db28b341aa7ab635009f26fc564ab818abfdc1d3ca30ee39a32ed2e9e1cef4b23d3e5c2701cdaf84895ee46c1c110d28771e220ab83c0dec58e34be624339cf0ef7c51823cd10c6f01a66c4ccdb7997989c8487dbf69a04a43bae0c9a91fb8837468rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlogback-1.2.13-150200.3.16.1.src.rpmlogbackmvn(ch.qos.logback:logback-classic)mvn(ch.qos.logback:logback-classic:pom:)mvn(ch.qos.logback:logback-core)mvn(ch.qos.logback:logback-core:pom:)mvn(ch.qos.logback:logback-parent:pom:)osgi(ch.qos.logback.classic)osgi(ch.qos.logback.core)@ @@    java-headlessjavapackages-filesystemmvn(org.slf4j:slf4j-api)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.83.0.4-14.6.0-14.0-15.2-14.14.1i{Khߺg@g~hed^@bjb@a{a*@]@]6@fstrba@suse.comfstrba@suse.comfstrba@suse.comgus.kenion@suse.comgus.kenion@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.com- Added patch: * logback-CVE-2026-1225.patch + backport of upstream fix for bsc#1257094, CVE-2026-1225: ACE vulnerability in configuration file- Upgrade to upstream version 1.2.13 * Fixed NPE in ThrowableProxy if extractSupressedThrowables method returns null. This fixes LOGBACK-1623 * Fixed incorrect use of HttpServletResponse.getStatus in logback-access as reported in LOGBACK-1580 * Fixed incorrect use of HttpServletRequest.getParameterNames() logback-access as reported in LOGBACK-1581 * Fixed incorrect SCP URL in Maven pom.xml. This issue was reported in LOGBACK-1633 * Fixes for CVE-2023-6481 as well CVE-2023-6378 were back-ported into the 1.2.x branch. Fixes will be effective only when run under Java 9 and later. Note that a successful exploitation of CVE-2023-6378/CVE-2023-6381 requires that logback-receiver component is enabled and also reachable by the attacker. - Removed patch: * logback-1.2.8-jetty.patch + not needed with this version - Added patch: * logback-CVE-2025-11226.patch + backport of upstream fix for bsc#1250715, CVE-2025-11226: ACE vulnerability in conditional configuration file processing- Added patch: * filtering.patch + Newer maven-filtering versions will throw error when trying to filter binary files and failing to do so. This avoids filtering on *.jks (Java Key Store) files.- CVE-2024-12798 (bsc#1234742) Arbitrary code execution via JaninoEventEvaluator * Resolution: remove JaninoEventEvaluator - CVE-2024-12801 (bsc#1234743) Server-Side Request Forgery (SSRF) in SaxEventRecorder * Resolution: prevent Server-Side Request Forgery (SSRF) attacks by ignoring external DTD files in DOCTYPE * Remove SaxEventRecorder - Add logback-CVE-2024-12801-CVE-2024-12798.patch- Use %patch -P N instead of deprecated %patchN.- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp- Upgrade to upstream version 1.2.11 * Backported fix for LOGBACK-1027. * Fixed incorrect String cast in JNDIUtil. This corrects LOGBACK-1604. * In SMTPAppenderBase empty username parameter is now treated the same way as null. This fixes LOGBACK-1594. * ContextInitializer no longer complains about missing logback.groovy configuration file. This fixes LOGBACK-1601. * In response to CVE-2021-42550 (aka LOGBACK-1591) the following steps were made: 1) Hardened logback's JNDI lookup mechanism to only honor requests in the java: namespace. All other types of requests are ignored. 2) SMTPAppender was hardened. 3) Temporarily removed DB support for security reasons. 4) Removed Groovy configuration support. As logging is so pervasive and configuration with Groovy is probably too powerful, this feature is unlikely to be reinstated for security reasons. The aforementioned vulnerability requires write access to logback's configuration file as a prerequisite. A successul RCE attack with CVE-2021-42550 requires all of the following conditions to be met: + write access to logback.xml + use of versions < 1.2.9 + reloading of poisoned configuration data, which implies application restart or scan="true" set prior to attack - Set project.build.sourceEncoding property to ISO-8859-1 to avoid the new maven-resources-plugin chocking on trying to filter in UTF-8 encoding JKS (binary) resources- Do not build against the log4j12 packages- Do not execute goals generateTestStubs and compileTests of gmavenplus-plugin, since we are not compiling or runnig tests during the rpm build. This also allows us to use a wider range of gmavenplus-plugin versions, since those executions changed names in 1.6.- Upgrade to version 1.2.8 (bsc#1193795) * Changes of version 1.2.8 + In response to LOGBACK-1591, all JNDI lookup code in logback has been disabled until further notice. This impacts ContextJNDISelector and element in configuration files. + Also in response to LOGBACK-1591, all database (JDBC) related code in the project has been removed with no replacement. + Note that the vulnerability mentioned in LOGBACK-1591 requires write access to logback's configuration file as a prerequisite. The log4Shell/CVE-2021-44228 and LOGBACK-1591 are of different severity levels. A successful RCE requires all of the following conditions to be met: - write access to logback.xml - use of versions < 1.2.8 - reloading of poisoned configuration data, which implies application restart or scan="true" set prior to attack + As an additional extra precaution, in addition to upgrading to logback version 1.2.8, the users are advised to set their logback configuration files as read-only. * Changes of version 1.2.7 + Added hostnameVerification to property SSLSocketAppender. This fixes LOGBACK-1574. * Changes of version 1.2.6 + To prevent XML eXternal Entity injection (XXE) attacks, Joran no longer reads external entities passed in XML files. This fixes LOGBACK-1465. * Changes of version 1.2.5 + Instead of an Appender, the LayoutWrappingEncoder now accepts a variable of type ContextAware as a parent. This fixes LOGBACK-1326. * Changes of version 1.2.4 + Added support for minimum length in %i filename pattern. This fixes LOGBACK-1248. + For size bound log file archiving, allow TimeBasedArchiveRemove to remove files with indexes containing upto 5 digits. This fixes LOGBACK-1175. + Added %prefix composite converter which automatically prefixes child converter output with the name of the converter. This feature is quite handy in environments where log files need to be parsed and monitored. - Changed patch: * logback-1.1.11-jetty.patch -> logback-1.2.8-jetty.patch + Rediff to changed context- Do not force building with java < 9 - Specify maven.compiler.release=8 to access the java.util.function.Supplier API, introduced in java 8 - Added patch: * logback-1.2.3-getCallerClass.patch + Access the sun.reflect.Reflection.getCallerClass by reflection, in order to be able to build with jdk >= 9- Initial packaging of logback 1.2.3h01-ch3a 1769772054 1.2.13-150200.3.16.11.2.131.2.131.2.131.2.131.2.131.2.131.2.13logbackREADME.mdlogbacklogback-classic.jarlogback-core.jarlogbackLICENSE.txtlogback.xmllogbacklogback-classic.pomlogback-core.pomlogback-parent.pom/usr/share/doc/packages//usr/share/doc/packages/logback//usr/share/java//usr/share/java/logback//usr/share/licenses//usr/share/licenses/logback//usr/share/maven-metadata//usr/share/maven-poms//usr/share/maven-poms/logback/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:42520/SUSE_SLE-15-SP2_Update/69590595f06fbedcef810e1f77f62cbd-logback.SUSE_SLE-15-SP2_Updatedrpmxz5noarch-suse-linuxdirectoryASCII textASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract)XML 1.0 document, ASCII textXML 1.0 document textPPPPPPPRRRnֳ  $$lCutf-87e396b7140c3f992bc615cf7d476d797653716e439e4e3759230f49630f3b8c8? 7zXZ !t/F:]"k%#m_MbRsG!wZN40zx1o9Բ䓚01kZ&%#<5 *]c~DCIڟ77M ߟe0iwOr,ς3hjO,R̟dЅޞ?|ɘgƷg]=!^th &zcڝ<@1, 49?2,p0/ ?`GVu/ 僴^pr@d_*Z^"LA0Ǯ7]ry'fn1?Bmѥ'ݥ׹5p(:iGKmu6CcrP=NaM\9NL:c/'k<`mhyӜ=Sv@1*AMHm7yj =;M'u+zf1н/քn@d,rnߨWRj\nzK#fyŗf^Aͷ}@mzNMbY>ϒƠg[|ށ0jn$Fk9AHV~5Vψ ~//uf=%.ˆb: +-c)11N.{}8Y;/E^21'-^b1jPr;7H3m SZ[0N"^_ URpHbi?萂ZSxR&'("wۨFD\{R+Ȍ eodsZ(ۈYm,ʷ捕-naU=DL&['6•GU^~TgXbF54ѓb jD-8;[-3,:^3i.?ř$웕؇pݦY^E>S OtR@W!vij`2W6#\ckDA`掂Jha7%.` }Mġ9L{/d!AZi"ċ^swPʠ ;$~m5Cf@B 0-gie^}JIJcf6TDG!J-x ӆa%cT^r:EH=́X>cU2>ޝ7*Iy |/"T:ʁӗJzȆAdzΰ; ab *?'Zs%,d}u/[w1GXܤ7:#{6Kmi&Ys]ZAhe%֘wj*zJd_eP˗Ͳ'D&;~!\ q(KذOO\3Iוq};'Ka,3D|$&`3%A+ @V26v[\4`E ᭓%ٹ*[ZJ=Be:n:[e̚4$,:|(gZ!Pkʦ\\6fl~lj1gymiRDk4_&7D^ +X*-{`/ۈ!zw~I}hĦE&Ѵ,!}f=6dk^j4uf@P72KU &T aH[ ,VXvmƌ7 Ua!ujJFA>KlGS0b'8v W݋R̭i7w +vmepK)Sn+i@{5`F x+"hF&KC+ГÈ3G.>ǁ(^py|Y -wji!T`QlxQW.~}RGAIbF䅄IJs:SC] NپKFrzIpҮ)eoWzB7m̽Vl^[ǢTw4T'#M2nxٓE8Ayd.'yK5'f Al_m\śn[ o Y9tC{YpT*|Bfχ^Y3$2:\/F=`$BwfTkpءu,(ژL ^Pb3y _$kP](_6<@2|-=K`,enP n>@y7WRzr3'6"+Dئ l.ml^a6/=:DT,6=ljI-cDwQ |/N !S c+ɗvzJrcD#l׫|7jg-76ؔ +(n]D f~ӻ=i"mضU(?Ԩ/hɭIPe8'ZLaJZa䬧oZ|x;9+#q؉u>+UP2;Jޯ3(;C\gD0[%ݾEӣ^2k] yTZ=w ', xhԏxw D|FӭIt4b个4MA#dFHӜ@AeZ\2R/n36'ܸogeԺ1̺%tnGX|i" 1")6 ;a5C $Ak1}ߔet@xu3p*{VR !VK)gk;սۑjmkm*k#[:%,9K9^(Xh"Y_Updf\M}Dvlw =6r 2%:e`j+4y_Fo5fȡWPi} l40A_m-ͣ %1? o3F\V2E#3.ĽdgJ\dDr)\k4am3C(*s d-`%2EYMȺwc!1s3 V[>KRM'pa,'Bcev*?HuC/_րWai#wvA/rb߳.n.Cj$1%AӼ0um'6RJOW' 2LTPܛ.si̯ܱj_n.P+0%o@'qCU Rjc# oW m2Z>@{k) .SK($vfH#vaRٺļ+"oGf鄤4ē;(fSw[wr&Qwh3uIx0 Q+Z37'FϹؒV;z Mt =q J+S<&oKPKGZTbj[ݰiܙ< " IBKD4m5QR{` Ųwh@Rl {棱ij+hH9+t䨌h(|Pg>t^U$Ksw qu3}x@ уi$ ym ]BŎ٦kM`FϡlB-c/V,ﾵf"dӬKU\0𪔰ri_˘9nnFRg7dO&*eZ1a֎nr,d-&8- 7~圯aDGȮ*&YїHPĺo+C+ťGF >:}%҉ЩaG=`M_btVڊlJ=-r p3o{ʩ3-^QB(h{1Gs- ~( gP~Hˑ3Wf2Qʩ>BjG=qwD hSwqyW]28chuxV(|XK,` 4 n-+a1QKqY 1¼S*ob,Y+ "'G7IH9c= I%28_b*t4nym9ݿ !^/oRğGRGס[lcHB#i_ٰ]YBN=SDclR&kB5(-`赢ww2:wN] = _~j%jnt'ìϊM9G/p Q'-Ci PGyY<g cEJV|2Ts?&WRI|;to y'A7C_ M|Yg,2 YJnے(2ﾧKm$֥m(=3Leڮ,ChS&$+R򊂣 B+֟<q#NYBm54KhS Aۃ4H uR!~Bc}\I5Hb&4~T _S\!=xԎ /u֣|[L^չːYK[+$aaYug" y]>0l1-vcSfRBPTxBQjl{*D siI.LdڵSV*aW5@)F5OG,ʨK$Ve*^y&C7 ~C`uf0:ȀZnsfi`!DVr*ߑIz[`ˣT^1G_?/Tx|I"S+%zcrb(BtfhZU1^W{GI @)NGr(VmdI$ obYgA\UU8'(a*h`va7vc&"/ՊOn*'Cc@b+4wuUGD νZ]:Ĥ34E"Y딋sWЃyhS(~u;`H(vUoF_3/GFO U [S@T4AE̠iiNOp_z6<-@O0^@mZ?TxM @M: 4?_ t}8'gsbriiО}|՛ 7t#=ώDeeu󃅩sG1 F+V!c5o9b[JdOէSeġ9,hk:ԍ2YH XYXJ%4ew"JsXYƨGlF- >6\΂JZMbI+u$ԛ*,yB\6zI\^T _0?|NnV;Y>:lپwJqDu WUCX(wN=wk_qE:5ÄP!oǀσ|R놶AGVn" 4* ՝熃[W]ev ˊ ?6049i@R&\g;sA GFs"ex.qo2hbrRƴ-ifSLwʮ`LVHCo$=ndg663jЊq^.₷g|cQV`$b%{.UԔP"{,g֭|Q{,!&\k32 =uʹ$6h(a^Tڌ o&&7([-jܶ3b) ȩ%@H_1Ai.L%ZU;/p^Pp`-Cs~/5*g!{<'cW%j8*Ƞ EJzܗ@_iW IWUi/u{>iߪr}̴[we?xh#!`ebSr `>4pW3~PcF|QXehA{ECzĠT5Vu|oVk#!e7-_I|<9M2\cxSVnCj` OZl7=t t\xgv103~0M㏜^KwPΧ<+ucSe FJ,_b>ACSLbԊ_g0^ęAy63R #ڶfІ\uG1#42-*;.gc]:,wbV\K fsnm S|U_xI\hmjOOZH#tQ#2:ZK@=f|j^ŕ;Q%KDsFQ 8 +$xR`.&KQ">Z];IYaHc2iMg7d {qra+ټaJ|02"8ޜZFCCѿ3^S,CKH|S|}('fꈔvX+sz2Z2_Gi3rR Fmohd2Ƣ6T *ey$g)>,ҍ5Awp^ƿa̧I؇8tSt蟅?9>Lʍ׫dm&zl{#JF+` . {WkwJJ ^`Ip\S.+7=ΚF}Dţt-dNMBphkXdڨ9WR CQ؟8 斤u^$yD/*b? \x5Eo+15wPBM72O-}吺B"*v 㓳F`waĪݪu:[3㨘?N"VFdφxGxY) ,`-˖Ky:(V,Dp -6qP͹ Âׂ \H(nJOuAlz ^TVoIy:2 1Lbh04 {Js#UA<8J],1i:EC칊3ijJ0QFC|dݸ"'^SXקuLZ˹ *pxa-epl6nCO൜h{̯AcbT ~E#I/=̹bAF 5orҌGrܾ'BB+3lO(}f;d&8eMp[aps9]][l4TtHGA9KsV]h`0T8A׃Q 򿐇m jyZ]i^(źy6BlX|?W6?D铼(N?3$Psa܆"7`g OdvNU y_/@A;im#A^|4RvwEtwɬDw.A,Ik8Qä贺4L'K6|0R#*O*sxeljJ4b=Ũ2Kw)Š*쬎4?"9u+&mNqF0R%;/8+Rk@jyoqD.F|,=1ֵpF#:A {wa=Fp?ai$Cy[ 5 &ޥChgVGU9fؠ"蹪rj_rXkD bV tOx- 6RUym*$Fyg YU<֋w-zANB [kٱGM*g(\wjKs jۺ Dw|/1{Ҷl",6 8z9F,ΕLh?c7QHm|>脉&ǒZ {KR ֟dޣl[ =}Lh'J_ns ZeE@IL b%WA0=bhL.#nI(%;W&'ǁî}rznj/YV0ZiK:|~_w4 (ٟۃr5 wLT&߀-x!g(1͠sA*`FH?-AQMp1bM2?P0fj}.UHCءYlwo,RWg]hF@LTߠHXۋb D"oP^ !Ivmo*2=[:pbs^!Dj͆BZn"n Dc1Q[gܣz(;cPM-VX\1vNH6+ԭ )Bё "uMi45U{%ȧ? .a طs c findK#O.<=XUvlX-/9'"_{(=j[R2^cu;)Hb<#]h!t38mF<ʔEY!ǿ6/Jg}YjIò &)#h8;lPZIW>>}da3w)q +l'o0{!ۈqCv[ri=@b.Yzd\.BJ̞k3EiCYw/cDz"p{^i}r%#f2fkAZ""6 Y]>$;ٞ}ۮk4_mr8ʊT-2AłJo46" p)^3 3u\ţmj xU~ U:7;aA8OOū+y ư C=zݨf$p?L).R@[yLhv&pb#G+Zb4z ޘjfg&eKsFQXL92J\EjG͛* MnE`7f7d5dE7ivW6w <Z-dvq’ʶX PZ'Pp91,LD9{MVw5Š 'KTVRP-ɣ_%kli΃ ط#qg@)/(b0$`UN:!4CpJ&xZ[3wB&N~$ya4-EPO'KŷA--\%6Qlmp}VuBCW222qC Vʐc1 So@ά209S-3ax(Ձs`^GoE}&>Q5&:  $xO+ʕ<_کbO##nv{>h0t,%i'}+3lG~G(Wԟ"\Zq3DuH=2| Ϋjkl@{R7iw[u,ܥ-|&WKlq"4;? üjh,N ̔QOF/]x%b,LveKi {Gu9-+gsr sgPV{j)pV!fgL?E? f7cոߤmQaK/= ˳<5Nˢ!›C}D>/LB_vW||igkvZ.3jI+Hl_]pA:ZQN~ipL3 {Ig$RPb~)5 79Aw Ùf40K3PN=>OoSIYYP5}Xuύ  YZ