<div class="container">
<h1>Recommended update for apache-commons-logging</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2025:0848-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2025-03-12T13:23:22Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">Basesystem Module 15-SP6</li>
<li class="list-group-item">openSUSE Leap 15.6</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP6</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that can now be installed.</p>
<h2>Description:</h2>
<p>This update for apache-commons-logging fixes the following issues:</p>
<ul>
<li>Upgrade to 1.3.4</li>
<li>Bug fix:<ul>
<li>Fix factory loading from context class loader</li>
</ul>
</li>
<li>Upgrade to 1.3.3</li>
<li>Bug Fixes:<ul>
<li>Update Log4j 2 OSGi imports</li>
<li>Fix PMD UnnecessaryFullyQualifiedName in SimpleLog.</li>
<li>Fix NullPointerException in SimpleLog#write(Object) on null
input.</li>
<li>Fix NullPointerException in SimpleLog#write(StringBuffer) on
null input.</li>
</ul>
</li>
<li>Includes changes from 1.3.2</li>
<li>Fixed Bugs:<ul>
<li>Add OSGi metadata to enable Service Loader Mediator</li>
<li>Apache commons logging shows 1.4 as latest
release instead of 1.3.1.</li>
<li>Deprecate org.apache.commons.logging.LogSource.jdk14IsAvailable.</li>
</ul>
</li>
<li>Includes changes from 1.3.1</li>
<li>New features:<ul>
<li>Add Maven property project.build.outputTimestamp for build
reproducibility.</li>
</ul>
</li>
<li>Fixed Bugs:<ul>
<li>Remove references to very old JDK and Commons Logging
versions</li>
<li>Update from Logj 1 to the Log4j 2 API compatibility layer</li>
<li>Allow Servlet 4 in OSGi environment</li>
<li>Fix generics warnings</li>
<li>Fix Import-Package entry for org.slf4j</li>
</ul>
</li>
<li>Includes changes from 1.3.0</li>
<li>New Features:<ul>
<li>Add support for Log4j API and SLF4J</li>
<li>Deprecate org.apache.commons.logging.impl.WeakHashtable
without replacement.</li>
<li>Deprecate and disable <code>Jdk13LumberjackLogger</code> and <code>Log4JLogger</code></li>
<li>Deprecate and disable <code>AvalonLogger</code> and <code>LogKitLogger</code></li>
<li>Add Automatic-Module-Name Manifest Header for
Java 9 compatibility</li>
</ul>
</li>
<li>Fixed Bugs:<ul>
<li>BufferedReader is not closed properly</li>
<li>Remove redundant initializer</li>
<li>Use a weak reference for the cached class loader</li>
<li>Add more entries to .gitignore file</li>
<li>Minor Improvements</li>
<li>[StepSecurity] ci: Harden GitHub Actions</li>
<li>Replace custom code with <code>ServiceLoader</code> call</li>
<li>Fix possible NPEs in LogFactoryImpl</li>
<li>Fix failing tests</li>
<li>Deprecate LogConfigurationException.cause in favor of
getCause()</li>
<li>Fix SpotBugs [ERROR] High: Found reliance on default encoding
in org.apache.commons.logging.LogFactory.initDiagnostics():
new java.io.PrintStream(OutputStream)
[org.apache.commons.logging.LogFactory] At
LogFactory.java:[line 1205] DM_DEFAULT_ENCODING.</li>
<li>Fix SpotBugs [ERROR] Medium: Class
org.apache.commons.logging.impl.WeakHashtable defines
non-transient non-serializable instance field queue
[org.apache.commons.logging.impl.WeakHashtable] In
WeakHashtable.java SE_BAD_FIELD.</li>
<li>Set java.logging as optional module</li>
<li>Fix SpotBugs [ERROR] Medium: Switch statement found in
org.apache.commons.logging.impl.SimpleLog.log(int, Object,
Throwable) where default case is missing
[org.apache.commons.logging.impl.SimpleLog] At
SimpleLog.java:[lines 505-522] SF_SWITCH_NO_DEFAULT.</li>
<li>Deprecate
org.apache.commons.logging.impl.Jdk13LumberjackLogger.dummyLevel
without replacement.</li>
</ul>
</li>
<li>Reinstate ant build (removed upstream)</li>
<li>add build.xml</li>
<li>add build.properties</li>
<li>Add upstream dev's public key to apache-commons-logging.keyring</li>
<li>Use %autosetup macro. Allows to eliminate the usage of deprecated
%patchN.</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
openSUSE Leap 15.6
<br/>
<code>zypper in -t patch openSUSE-SLE-15.6-2025-848=1</code>
</li>
<li class="list-group-item">
Basesystem Module 15-SP6
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-848=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
openSUSE Leap 15.6 (noarch)
<ul>
<li>apache-commons-logging-1.3.4-150200.11.9.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP6 (noarch)
<ul>
<li>apache-commons-logging-1.3.4-150200.11.9.1</li>
</ul>
</li>
</ul>
</div>