# logback-1.2.13-patch

**Repository Path**: zhouxianli/logback-1.2.13-patch

## Basic Information

- **Project Name**: logback-1.2.13-patch
- **Description**: 基于logback 1.2.13版本源码修复漏洞，解决无法升级SpringBoot 2.7但需要解决logback安全漏洞的问题
- 修复CVE-2024-12798漏洞（Janino相关）
- 修复CVE-2024-12801漏洞（StaxEventRecorder相关）
- **Primary Language**: Java
- **License**: Not specified
- **Default Branch**: 1.2.13-patch
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2025-08-15
- **Last Updated**: 2025-09-24

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# 补丁版说明
原版1.2.X到1.2.13就停止更新了。但手头还有基于SpringBoot 2 + JDK8的项目需要维护，为解决安全漏洞，创建了这个镜像和分支。

## 补丁原则

只改安全漏洞，不改单元测试，基于原版最新版本分支的变更进行最小修改。

本地JDK1.8单元测试通过。



## 编译打包

```sh
mvn -DskipTests clean package
```



## 安装到本地

```sh
mvn -DskipTests install
```



## 发布到本地私服

```sh
# 参数按实际情况修改，第一个参数为repositoryId（对应maven的config.xml中配置的服务器id），第二个参数为url，示例如下
deploy_lib.bat jsptz-maven-thirdparty http://xxx.xxx.xxx.xxx:8081/nexus/content/repositories/thirdparty
```



## 变更历史

基于logback 1.2.13版本源码修复漏洞.
### 1.2.13-patch-1

修复（Fixed）:
- 修复CVE-2024-12798漏洞（Janino相关）
- 修复CVE-2024-12801漏洞（StaxEventRecorder相关）






# 原版说明

#About logback

Thank you for your interest in logback, the reliable, generic, fast
and flexible logging library for Java.

The Logback documentation can be found on the [project
web-site](https://logback.qos.ch/documentation.html) as well as under
the docs/ folder of the logback distribution.

#Building logback

Building logback is documented at:

  https://logback.qos.ch/setup.html#ide

#In case of problems

In case of problems please do not hesitate to post an e-mail message
on the logback-user@qos.ch mailing list.  However, please do not
directly e-mail logback developers. The answer to your question might
be useful to other users. Moreover, there are many knowledgeable users
on the logback-user mailing lists who can quickly answer your
questions.


#Pull requests

If you are interested in improving logback, great! The logback community
looks forward to your contribution. Please follow this process:

1. Please file a [bug
   report](https://logback.qos.ch/bugreport.html). Pull requests with
   an associated JIRA issue will get more attention.

   Optional: Start a discussion on the [logback-dev mailing
   list](https://logback.qos.ch/mailinglist.html) about your proposed
   change.

2. Fork qos-ch/logback. Ideally, create a new branch from your fork for
   your contribution to make it easier to merge your changes back.

3. Make your changes on the branch you hopefuly created in Step 2. Be
   sure that your code passes existing unit tests.

4. Please add unit tests for your work if appropriate. It usually is.

5. Push your changes to your fork/branch in github. Don't push it to
   your master! If you do it will make it harder to submit new changes
   later.

6. Submit a pull request to logback from from your commit page on
   github.


# Build Status
[![Build Status](https://travis-ci.org/qos-ch/slf4j.png)](https://travis-ci.org/qos-ch/slf4j)