logback (1:1.2.3-5) unstable; urgency=medium

  * Team upload.
  * Fixed the compatibility with Jetty 9.4

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 10 Dec 2018 22:22:11 +0100

logback (1:1.2.3-4) unstable; urgency=medium

  * Team upload.
  * Depend on libtomcat9-java instead of libtomcat8-java

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 03 Dec 2018 21:42:43 +0100

logback (1:1.2.3-3) unstable; urgency=medium

  * Team upload.
  * Fixed the build failure with Java 11 (Closes: #911183)
  * Removed Damien Raude-Morvan from the uploaders (Closes: #889387)
  * Standards-Version updated to 4.2.1
  * Switch to debhelper level 11
  * Use salsa.debian.org Vcs-* URLs

 -- Emmanuel Bourg <ebourg@apache.org>  Sun, 11 Nov 2018 01:10:52 +0100

logback (1:1.2.3-2) unstable; urgency=medium

  * Team upload.
  * Freshen debian/copyright for current upstream
  * Bump Standards-Version to 4.1.2
  * Add myself to Uploaders
  * Use https for Homepage URL
  * Upload to unstable after building r-deps.

 -- tony mancill <tmancill@debian.org>  Thu, 30 Nov 2017 19:21:55 -0800

logback (1:1.2.3-1) experimental; urgency=medium

  * Team upload.
  * New upstream version 1.2.3
  * Disable and clean-up unused patches
  * Add build-dep on libgmavenplus-java
  * No longer rename javax.servlet-api artifact in debian/maven.rules
  * Add ant-junit and maven-cal10n-plugin to maven.ignoreRules
  * Update groupId of org.hsqldb in maven.ignoreRules

 -- tony mancill <tmancill@debian.org>  Tue, 28 Nov 2017 19:52:38 -0800

logback (1:1.1.9-5) unstable; urgency=medium

  * Team upload.
  * Add wagon-ssh to maven.ignoreRules (Closes: #882472)
  * Address privacy disclosure (external URL) in documentation HTML
  * Bump Standards-Version to 4.1.1

 -- tony mancill <tmancill@debian.org>  Sun, 26 Nov 2017 18:59:24 -0800

logback (1:1.1.9-4) unstable; urgency=medium

  * Team upload.
  * Build and ship logback-access:
    + Un-ignore the logback-access artifact.
    + Patch logback-access to comply with the servlet 3.1 API (upstream commit
      9ad7cc6141).
    + B-D on tomcat 8 and jetty 9 and force Debian's versions in
      d/maven.rules.
  * Bump Standards to 4.0.0; no changes needed.

 -- Apollon Oikonomopoulos <apoikos@debian.org>  Thu, 29 Jun 2017 21:00:47 +0300

logback (1:1.1.9-3) unstable; urgency=medium

  * Team upload.
  * The patch for CVE-2017-5929 was incomplete. Add CVE-2017-5929-part2.patch
    and really fix the issue. (Closes: #857343)
  * Remove all test cases from CVE-2017-5929.patch and only apply the minimal
    changes to make it easier to review the package. Tests are disabled anyway.

 -- Markus Koschany <apo@debian.org>  Tue, 04 Apr 2017 14:49:44 +0200

logback (1:1.1.9-2) unstable; urgency=medium

  * Team upload.
  * Fix CVE-2017-5929:
    It was discovered that logback, a flexible logging library for Java, would
    deserialize data from untrusted sockets. This issue has been resolved by
    adding a whitelist to use only trusted classes. (Closes: #857343)
    Thanks to Fabrice Dagorn for the report.

 -- Markus Koschany <apo@debian.org>  Tue, 28 Mar 2017 17:22:37 +0200

logback (1:1.1.9-1) unstable; urgency=medium

  * Team upload.
  * New upstream release

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 23 Jan 2017 18:30:07 +0100

# For older changelog entries, run 'apt-get changelog liblogback-java'
