- update to 1.1.0 (bsc#1211173, CVE-2023-31038):

* Fix CVE-2023-31038
  * Fix to build on Windows Server 2016
  * Fix compiling errors with older compilers
  * Make ODBC and SMTP opt-in instead of automatic
  * Parameterize statements for ODBC inserts. Add new generic
    DBAppender class that uses APR for database support
  * Fix Qt support
- update to 1.0.0:
  * This is a major release that fixes a number of long-standing
    issues and is desinged to make Log4cxx ABI stable moving
    forward.
  * Removed log4j style Java serialization. Due to Java's inherent
    problems with serialization, and the fact that Chainsaw no
    longer supports it, it has been completely removed.
  * A number of obsolete classes have been removed
  * Removal of TTCCLayout. If you still want this layout, use a
    PatternLayout with a format similar to the following: %r [%t] %-5p
    - %m%n
  * Removal of DateLayout. Use PatternLayout instead.
  * Classes now use an internal private class to store member
    variables in order to make them ABI stable
  * Multiprocess support is available, but Log4cxx must be
    explicitly compiled with this option
- implement gpg validation

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/log4cxx?expand=0&rev=14

apache-log4cxx-0.13.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4e5be64b6b1e6de8525f8b87635270b81f772a98902d20d7ac646fdf1ac08284
-size 551303

apache-log4cxx-1.1.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1fc7d82697534184bc0f757348d969d24852b948f63d6b17283fd1ee29c2c28a
+size 564044

apache-log4cxx-1.1.0.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=WV9D
+-----END PGP SIGNATURE-----

log4cxx.changes

@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Sat Dec 30 20:59:08 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.1.0 (bsc#1211173, CVE-2023-31038):
+  * Fix CVE-2023-31038
+  * Fix to build on Windows Server 2016
+  * Fix compiling errors with older compilers
+  * Make ODBC and SMTP opt-in instead of automatic
+  * Parameterize statements for ODBC inserts. Add new generic
+    DBAppender class that uses APR for database support
+  * Fix Qt support
+- update to 1.0.0:
+  * This is a major release that fixes a number of long-standing
+    issues and is desinged to make Log4cxx ABI stable moving
+    forward.
+  * Removed log4j style Java serialization. Due to Java's inherent
+    problems with serialization, and the fact that Chainsaw no
+    longer supports it, it has been completely removed.
+  * A number of obsolete classes have been removed
+  * Removal of TTCCLayout. If you still want this layout, use a
+    PatternLayout with a format similar to the following: %r [%t] %-5p
+    - %m%n
+  * Removal of DateLayout. Use PatternLayout instead.
+  * Classes now use an internal private class to store member
+    variables in order to make them ABI stable
+  * Multiprocess support is available, but Log4cxx must be
+    explicitly compiled with this option
+- implement gpg validation
+
 -------------------------------------------------------------------
 Sun Oct  2 13:13:38 UTC 2022 - Dirk Müller <dmueller@suse.com>
 

log4cxx.keyring

@@ -0,0 +1,51 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=Gq8a
+-----END PGP PUBLIC KEY BLOCK-----

log4cxx.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package log4cxx
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,14 +17,16 @@
 
 
 Name:           log4cxx
-Version:        0.13.0
+Version:        1.1.0
 Release:        0
-%define soname 13
+%define soname 15
 Summary:        Log4j like C++ Logging Library
 License:        Apache-2.0
 Group:          Development/Libraries/C and C++
 URL:            https://logging.apache.org/log4cxx/latest_stable/
-Source:         https://downloads.apache.org/logging/log4cxx/%{version}/apache-log4cxx-%{version}.tar.gz
+Source0:        https://downloads.apache.org/logging/log4cxx/%{version}/apache-log4cxx-%{version}.tar.gz
+Source1:        https://downloads.apache.org/logging/log4cxx/%{version}/apache-log4cxx-%{version}.tar.gz.asc
+Source2:        log4cxx.keyring
 BuildRequires:  cmake
 BuildRequires:  doxygen
 BuildRequires:  gcc-c++