Your message dated Sat, 06 Jun 2026 18:33:46 +0000
with message-id <[email protected]>
and subject line Bug#1137352: fixed in log4net 1.2.10+dfsg-10
has caused the Debian Bug report #1137352,
regarding ITS: log4net - highly configurable logging API for the CLI
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1137352: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1137352
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: wnpp
Severity: wishlist
Owner: James Montgomery <[email protected]>
I intend to salvage the log4net source package.
The current maintainer is the Debian CLI Libraries Team
([email protected]). The package has seen no
uploads since April 2023 (version 1.2.10+dfsg-9) and has three open
bugs:
#1112150 (serious): cli-common removal blocks migration to testing
#1102176 (important): missing policy.1.2.log4net.dll after rebuild
#1133360 (important): CVE-2026-40021 (fixed upstream, PR #280)
The Salsa repository is already under the dotnet-team namespace:
https://salsa.debian.org/dotnet-team/log4net
I maintain src:mono and src:libgdiplus and am working through the
cli-common removal work across the dotnet-team package set. I have
fixes for #1112150 and #1102176 prepared as Salsa MR !1, and intend to
incorporate the upstream CVE fix in the adoption upload.
The adoption upload will change Maintainer to:
Debian .NET Team <[email protected]>
with James Montgomery <[email protected]> in Uploaders.
Thanks,
--
James Montgomery <[email protected]>
--- End Message ---
--- Begin Message ---
Source: log4net
Source-Version: 1.2.10+dfsg-10
Done: James Montgomery <[email protected]>
We believe that the bug you reported is fixed in the latest version of
log4net, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
James Montgomery <[email protected]> (supplier of updated log4net
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 22 May 2026 19:39:08 -0400
Source: log4net
Architecture: source
Version: 1.2.10+dfsg-10
Distribution: unstable
Urgency: medium
Maintainer: Debian .NET Team <[email protected]>
Changed-By: James Montgomery <[email protected]>
Closes: 1102176 1112150 1133360 1137352
Changes:
log4net (1.2.10+dfsg-10) unstable; urgency=medium
.
* Team upload. Adopt into the Debian .NET Team.
- Update Maintainer to Debian .NET Team <[email protected]>
- Add James Montgomery <[email protected]> to Uploaders
- Bump Standards-Version to 4.7.2 (no changes required)
- Set Rules-Requires-Root: no
- Update Homepage to use https://
(Closes: #1137352)
* Remove cli-common build and runtime integration:
- Drop cli-common-dev from Build-Depends-Indep and obsolete ${cli:Depends}
- Remove dh_installcligac, dh_cligacpolicy, dh_clifixperms, dh_makeclilibs,
dh_clideps calls from debian/rules
- Delete debian/cligacpolicy and debian/installcligac
- Add explicit Mono runtime dependencies for liblog4net1.2-cil
- Keep built log4net.dll non-executable (chmod 0644)
(Closes: #1112150, #1102176)
* Fix XmlLayout invalid character handling (CVE-2026-40021):
- Backport upstream fix from PR #280 (merged in log4net 3.3.0):
wrap WriteAttributeString calls on user-controlled fields with
Transform.MaskXmlInvalidCharacters() in XMLLayout.cs and
XmlLayoutSchemaLog4j.cs
(Closes: #1133360)
Checksums-Sha1:
df48c871751c6359ab48c7f7cbe7fd4fb73cfc70 1935 log4net_1.2.10+dfsg-10.dsc
bd0fea831de4d5c636e5b0993987c1d6590518a7 6716
log4net_1.2.10+dfsg-10.debian.tar.xz
9e4e2d6017f286d8504f819896061fe6fbc4e3e6 5561
log4net_1.2.10+dfsg-10_source.buildinfo
Checksums-Sha256:
d6ec8efd0fe8e9c169609bc38874e3d525bba777169f122d6ef8b281a3a9169b 1935
log4net_1.2.10+dfsg-10.dsc
04871115b545f349afe92ea744b1d741e5a6ef48f6fb8b427170c44f5c77a99f 6716
log4net_1.2.10+dfsg-10.debian.tar.xz
16b94659c2d70eff7c40363c20e88fe039a3544ed0293779c6acefae7ca3a695 5561
log4net_1.2.10+dfsg-10_source.buildinfo
Files:
287694b4e359924f9db2daa3966a8c35 1935 libs optional log4net_1.2.10+dfsg-10.dsc
30dfe40069469a2b0e4019a0e43931c7 6716 libs optional
log4net_1.2.10+dfsg-10.debian.tar.xz
4b81dae2aec6b542c565c39daa3cb6da 5561 libs optional
log4net_1.2.10+dfsg-10_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQHEBAEBCgAuFiEEQGIgyLhVKAI3jM5BH1x6i0VWQxQFAmokZTQQHGJhZ2VAZGVi
aWFuLm9yZwAKCRAfXHqLRVZDFDLTDADlKM8NOA67Gr+XlcMur/1tLCJ2CD0m3QaY
QbiKfQzJs5GDfTyYZqi8cMQnbtLS5DNCFHlmUttKhffdQKAcH1C0H9kWqpB+wDSr
hEMIhI9e+PWdyArrL1LezO4nzem/0fmZpQpGgwVsm+uQ2pDBaURN6TFzEVu0/WZ3
HMeE8l1r7EMgMslsukJcMp679itzXyuDLG9DcZfSeYqKkb2loqlCk5Dzs7kUSY7G
daGUmHFWWsqO5Ho6HEtLp4d7gxRIeQDZz5iHhL8sxmQud4MovEDKisalVLNK+k+6
ERliXI18GUUeNsQhtMWL8hzS36neZHTxoeHIuu6F4UK1kZWZb1cCYNIArllyH3Ng
SKWjYXV0f80xFxAeaaZ8xP/XXzqgQAfhjs5CbzY1I/9TLIQR/gI5emKDDPXJht7k
lDxcfg5e6OFA7qqaHaAhufn3YRs4iE8vMllH/Rw9MtgVq9bdCujDT8LvRMW8UnSF
wwrvV21nzj5SA+29KhoMbOBxR0MR2/Q=
=1wU4
-----END PGP SIGNATURE-----
pgpuKUeDBOLkH.pgp
Description: PGP signature
--- End Message ---
