November 2022 - logback-dev

[JIRA] (LOGBACK-302) Wrong date format in access log
by QOS.CH (JIRA) 29 Nov '22

29 Nov '22

1 0

[JIRA] (LOGBACK-1696) Log timestamps incorrect month format on en_AU.UTF-8
by QOS.CH (JIRA) 29 Nov '22

29 Nov '22

1 0

[JIRA] (LOGBACK-1696) Log timestamps incorrect month format on en_AU.UTF-8
by QOS.CH (JIRA) 29 Nov '22

29 Nov '22

1 0

[JIRA] (LOGBACK-1606) Bring Back Groovy Config and use SecureASTCustomizer to secure it
by QOS.CH (JIRA) 28 Nov '22

28 Nov '22

1 0

[JIRA] Updates for LOGBACK-1709: Double check that KeyPairValue serialized properly and passes HardenedInputStream
by QOS.CH (JIRA) 23 Nov '22

23 Nov '22

logback / LOGBACK-1709 [Open] Double check that KeyPairValue serialized properly and passes HardenedInputStream ============================== Here's what changed in this issue in the last few minutes. This issue has been created View or comment on issue using this link https://jira.qos.ch/browse/LOGBACK-1709 ============================== Issue created ------------------------------ Ceki Gülcü created this issue on 23/Nov/22 8:57 PM Summary: Double check that KeyPairValue serialized properly and passes HardenedInputStream Issue Type: Bug Affects Versions: 1.3.5, 1.4.5 Assignee: Ceki Gülcü Components: logback-classic Created: 23/Nov/22 8:57 PM Priority: Major Reporter: Ceki Gülcü ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

[JIRA] (LOGBACK-1705) Upgrading logback from 1.2.6 to 1.3.0 stops logging
by QOS.CH (JIRA) 23 Nov '22

23 Nov '22

1 0

[JIRA] (LOGBACK-1708) Add the OpenSSF Scorecards GitHub Action
by QOS.CH (JIRA) 22 Nov '22

22 Nov '22

1 0

[JIRA] (LOGBACK-1708) Add the OpenSSF Scorecards GitHub Action
by QOS.CH (JIRA) 22 Nov '22

22 Nov '22

1 0

[JIRA] Updates for LOGBACK-1708: Add the OpenSSF Scorecards GitHub Action
by QOS.CH (JIRA) 22 Nov '22

22 Nov '22

logback / LOGBACK-1708 [Open] Add the OpenSSF Scorecards GitHub Action ============================== Here's what changed in this issue in the last few minutes. This issue has been created This issue is now assigned to you. View or comment on issue using this link https://jira.qos.ch/browse/LOGBACK-1708 ============================== Issue created ------------------------------ Pedro Kaj Kjellerup Nacht created this issue on 22/Nov/22 3:50 PM Summary: Add the OpenSSF Scorecards GitHub Action Issue Type: Improvement Assignee: Logback dev list Attachments: sc-gha-example.png Created: 22/Nov/22 3:50 PM Labels: security Priority: Major Reporter: Pedro Kaj Kjellerup Nacht Description: There's been a large increase in [supply-chain attacks|https://www.sonatype.com/state-of-the-software-supply-chain/introdu…] The [OpenSSF|https://openssf.org/] defined logback as one of the most important open-source projects, and has developed the [Scorecards|https://github.com/ossf/scorecard] system to help projects detect how they can improve their security posture. This is done via a series of [checks|https://github.com/ossf/scorecard#scorecard-checks] of repository settings, workflow definitions, etc. The OpenSSF has also released the [Scorecards GitHub Action|https://github.com/ossf/scorecard-action] which automates these checks. If any possible improvements are detected, they are sent to the project's security dashboard, along with actionable instructions for how to implement these changes (see image attached). Would there be interest in a PR to implement this Action? Disclaimer: I work for Google (an OpenSSF founding member), where my full-time role is to help open-source maintainers improve their security. ============================== This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

1 0

[JIRA] (LOGBACK-1706) insertFromJNDI does not work in 1.4.4
by QOS.CH (JIRA) 21 Nov '22

21 Nov '22

1 0