logback-access-1.2.11-150200.3.7.3<>,5`cp9|j]<eJ90{>L?<d % S $,0Ij    $ + 4PsPl(>8H9`:FGHIXY\,]H^b`c defluvwxyz8Clogback-access1.2.11150200.3.7.3Logback-access module for Servlet integrationThe logback-access module integrates with Servlet containers, such as Tomcat and Jetty, to provide HTTP-access log functionality. Note that you could easily build your own module on top of logback-core.csheep20SUSE Linux Enterprise 15SUSE LLC EPL-1.0 OR LGPL-2.1-or-laterhttps://www.suse.com/Unspecifiedhttps://logback.qos.ch/linuxnoarcheA큤A큤A큤cccb#ccc42d44aaf55f14aea8f1d8b8ecef6d9fa2b6a6619dafa4685f6820e1e664f3cd494a99c6ee7e8b5ba3ef66a1d234c22a55c149e93584040d66a7f6694d552e7eaf710ca8c063e0781d2ebae60283cc78d42021bb21a723f13aeb005c586829c61cd0f37be71ba79ff7f17ae840f88e35be2996867dd0c50a15f8c42ee4d8995b0rootrootrootrootrootrootrootrootrootrootrootrootrootrootlogback-1.2.11-150200.3.7.3.src.rpmlogback-accessmvn(ch.qos.logback:logback-access)mvn(ch.qos.logback:logback-access:pom:)osgi(ch.qos.logback.access)@ @@    java-headlessjavapackages-filesystemmvn(ch.qos.logback:logback-core)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.81.2.113.0.4-14.6.0-14.0-15.2-14.14.1bjb@a{a*@]@]6@fstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.com- Upgrade to upstream version 1.2.11 * Backported fix for LOGBACK-1027. * Fixed incorrect String cast in JNDIUtil. This corrects LOGBACK-1604. * In SMTPAppenderBase empty username parameter is now treated the same way as null. This fixes LOGBACK-1594. * ContextInitializer no longer complains about missing logback.groovy configuration file. This fixes LOGBACK-1601. * In response to CVE-2021-42550 (aka LOGBACK-1591) the following steps were made: 1) Hardened logback's JNDI lookup mechanism to only honor requests in the java: namespace. All other types of requests are ignored. 2) SMTPAppender was hardened. 3) Temporarily removed DB support for security reasons. 4) Removed Groovy configuration support. As logging is so pervasive and configuration with Groovy is probably too powerful, this feature is unlikely to be reinstated for security reasons. The aforementioned vulnerability requires write access to logback's configuration file as a prerequisite. A successul RCE attack with CVE-2021-42550 requires all of the following conditions to be met: + write access to logback.xml + use of versions < 1.2.9 + reloading of poisoned configuration data, which implies application restart or scan="true" set prior to attack - Set project.build.sourceEncoding property to ISO-8859-1 to avoid the new maven-resources-plugin chocking on trying to filter in UTF-8 encoding JKS (binary) resources- Do not build against the log4j12 packages- Do not execute goals generateTestStubs and compileTests of gmavenplus-plugin, since we are not compiling or runnig tests during the rpm build. This also allows us to use a wider range of gmavenplus-plugin versions, since those executions changed names in 1.6.- Upgrade to version 1.2.8 (bsc#1193795) * Changes of version 1.2.8 + In response to LOGBACK-1591, all JNDI lookup code in logback has been disabled until further notice. This impacts ContextJNDISelector and element in configuration files. + Also in response to LOGBACK-1591, all database (JDBC) related code in the project has been removed with no replacement. + Note that the vulnerability mentioned in LOGBACK-1591 requires write access to logback's configuration file as a prerequisite. The log4Shell/CVE-2021-44228 and LOGBACK-1591 are of different severity levels. A successful RCE requires all of the following conditions to be met: - write access to logback.xml - use of versions < 1.2.8 - reloading of poisoned configuration data, which implies application restart or scan="true" set prior to attack + As an additional extra precaution, in addition to upgrading to logback version 1.2.8, the users are advised to set their logback configuration files as read-only. * Changes of version 1.2.7 + Added hostnameVerification to property SSLSocketAppender. This fixes LOGBACK-1574. * Changes of version 1.2.6 + To prevent XML eXternal Entity injection (XXE) attacks, Joran no longer reads external entities passed in XML files. This fixes LOGBACK-1465. * Changes of version 1.2.5 + Instead of an Appender, the LayoutWrappingEncoder now accepts a variable of type ContextAware as a parent. This fixes LOGBACK-1326. * Changes of version 1.2.4 + Added support for minimum length in %i filename pattern. This fixes LOGBACK-1248. + For size bound log file archiving, allow TimeBasedArchiveRemove to remove files with indexes containing upto 5 digits. This fixes LOGBACK-1175. + Added %prefix composite converter which automatically prefixes child converter output with the name of the converter. This feature is quite handy in environments where log files need to be parsed and monitored. - Changed patch: * logback-1.1.11-jetty.patch -> logback-1.2.8-jetty.patch + Rediff to changed context- Do not force building with java < 9 - Specify maven.compiler.release=8 to access the java.util.function.Supplier API, introduced in java 8 - Added patch: * logback-1.2.3-getCallerClass.patch + Access the sun.reflect.Reflection.getCallerClass by reflection, in order to be able to build with jdk >= 9- Initial packaging of logback 1.2.3sheep20 16773329761.2.11-150200.3.7.31.2.111.2.111.2.11logbacklogback-access.jarlogback-accessLICENSE.txtlogback-access.xmllogbacklogback-access.pom/usr/share/java//usr/share/java/logback//usr/share/licenses//usr/share/licenses/logback-access//usr/share/maven-metadata//usr/share/maven-poms//usr/share/maven-poms/logback/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:28016/SUSE_SLE-15-SP2_Update/5b23e9419368e766ccfe0d6ef1bc3276-logback.SUSE_SLE-15-SP2_Updatedrpmxz5noarch-suse-linuxdirectoryASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract Zip archive data, at least v2.0 to extract)ASCII textXML 1.0 document, ASCII textXML 1.0 document textPPPRRRg_ٺLLX utf-8ba5ff2b3891da95e97dd0045ecd240b1bd67e180a5b3d1c2227bf0a0705a6f94? 7zXZ !t/-\]"k%wmjg0ҰM)>4vh^xɜ{ZAtقt')B2ޤi> S% LBu houNظb"KGF,]˒iԹBvF⤦w%fu1|ԍv9xKEסHTO^2xΉfQc<@G%3'9#g4c5Yw1KPuni)8ۖ=ߵrzWLNq ԆE1'-U`hq,=]GF^t8{ѭoOlnՠ'XlgR%tAm6c%B|!W5i|@(9On 0'M+fL6}'Ve [ u&a v>M?Ƞc饝ߍz vO7ѮTl'&i^r(I0-Ũx@5|ց&\gKG?Nū ~d#}D.GZ5g-bwVѹ eW-[}nZ~+ 'H/ƻq@8SzUY6-LHWwHdlʱG-zѽVZX4-Rk9TKjabedJ\x=w3ndY;!?eA=;뼵T*eOECuPm1!9ω{2-.O1EE0oLc)K˹0q?2"IۈJ9dE!VNJI?zkD;rhȖgD~ mi9'II\H?[.>B>EXWA_,8`~H$UpxԼuvQE6*[.֦|J;"ml|ަ'7{@i?KQs~{bPg"wr[$K-ѐ&j_`oh$h{&7RZ[G5ݜIӊhXsj!D MJs+bT2:@@tY<]M氊-%tAcD0]=&4֧98XEe"t?? i~w[:MVB1!)6|Et(nt j'f4ւJ%))1Y]b},y\v9Vx"Lp7R Yu.|VEEQm3+@q+pe57Q.^2\5]HٯF龸LPFGg J%h^P~d )$JZZ WK)_#EݨV0o>4)ηnŅՑVXVȔjPT3ר1Sޓ{w1imcjk!+ާGd(EQjԯynD,8e߅|"4t'2۵)hrE7Q|t0+BTY@q͛PJZSaoJm|jӎo[d1BGkQ&-Xt+Y'!j? $?x6ț2E(K(3fmc4@a;KY鳻tCgcTkWM'x8ʾ֊˰̒_ 9 )|C#Wm~}kCDPXnη=|Fln4[\RGo0@,ye36/#zO9P~ y|}`{eIJ_l}8lK\rDevl ֘q)啳)tE Rbv@>Z1]Ǿ+?;m@lחdRu_άNƝliO+{PK:+#<əe!839p09U.t_b}j]1*YDF(=E*gsJ)"wl)MZ}h絵pyN/k'"Ebe E6cd5LIYQsYW Guk6=FzxKb5 O{[~RA xEI3M\e(}.UA:~mėRAhݚت/)lO>H?GaOZ'R-'=(f3=y Gطl6Z3DA fP3)Kuw̷_ K~7r2pqp g=\nlEm6F}g0ߗQB~1+.6˙˭!hIzSji] ,D 6C·Ynh yGeݥ@úC6I槽xiTW#t>;"}r )j5U\.&~" n?hzQ؜ypi~_"Te/+, /#j%K~0s"$0`J-1"HC>$z M;ꘄMx*6MѼNjubcXݣH, S\?iՙVf',_F 0nQMGVd#~ϏcaΝFbdct+T s+LM.U)0IujL_Ot )7 &MSa:Ӧ$JjaXʨRt9I͊13kml7*DGL9@:Fr c-Y$nX0('p`-Փw(sdk@|:B-PlObHnH[_!^]N|~TFW3l\ IRsLJRNtTX>:ՍTl#]׫q+o/p 0ۗ.bYvQ+-"ohHU#Q#fd෥ڀmb/?95ʵyrS,{ioh;f~e΀_~ׁ2_YM4)?wvO03V@ɯeR8Ctm4as[k0l̯ua?1nyvwbhC e&h~ؾ##\wDܖ[8V"[OkVsDECǒʌxM.FL{=Kz@7\YnUu-k02b3Rg8]ќ%PI{L}DxD#,ăE5u;E:58帏sc`!^΋@"Or)c[z%'!")۰ @qr;"6~ȹ. BD  Aݬ!B57Ƽ`ewydGadDRzžіhtE'r_;U%ј]׋3hφk6$?h \&VEs^FA2?Hd9q.3tRWL߈@&σ\(k-  ?q6&&m^ţ @waR@ U,V2Y*%iz=!Y_h!xrib Jo+JD5"0{}7C;XC|Q-x{t@L>'tȭUZN$G%UJڬ3y$ƛ{]Oۭ3!LYPg ZşغIF.N{/zkN{nxMnHhB[\pO4j\i1'9}a)/t~?W`(X/XK}Ȧ9wwO g:8پU$ߒBN lt=7,h'mVxNs5?g8(/!†cmW()W )_?F{Wmu= BѶicRAPRzjM&aerueC> ?$tIg礪ozGڬ:rsrRO 9- LTO]>BѴT8EKLfDZ8~ 9_:t,SQY|n <^H!LM_));/wb !S!]\o0]X^j`m=29fV͑$Un[xu-)oFCBC u2}ygv4y_e9H BvY"ϝKaj!0fE"ڙX? [PY윞HPҨUU/(nsAnN eMs ἧ«AA:*#+cn0^NPlK? MU%w/1fPc]&*Y&gRQ:HQhG1RtP{jyTv|JK*X]A+Лڴ>)'<SW#pjHIQ[S Qe勁u1x–mLhriPw|L"9[ "3`6dұ)xmxHtxJ. '˽aA0mg$q'5Ӝb3m=.S ebn2 CT} d 8A`=SRs/~ \)pnVNJK? e{ Ê{h͌eBv$p%4*Tӡe) <ޗQ$qS_O?"ywk]ZwBG0Ю?+Z&$ YZ