Import Debian changes 1:1.0.4-1+deb7u1

logback (1:1.0.4-1+deb7u1) wheezy-security; urgency=high

  * Team upload.
  * Fix CVE-2017-5929:
    It was discovered that logback, a flexible logging library for Java, would
    deserialize data from untrusted sockets. This issue has been resolved by
    adding a whitelist to use only trusted classes. (Closes: #857343)

logback (1:1.0.4-1) unstable; urgency=low

  * New upstream release.
  * d/control: Update Standards-Version to 3.9.3: no changes needed.
  * d/copyright: Upgrade to copyright-format 1.0.