zippy1978 / ghost4j

Java wrapper for Ghostscript C API + PS/PDF document handling API
http://www.ghost4j.org
GNU Lesser General Public License v3.0
64 stars 38 forks source link

Logging improvement from Log4j to Slf4j facade #75

Closed AnnYoS closed 2 years ago

AnnYoS commented 2 years ago

Log4j2 under v2.17.1 have a critical vulnerability (CVE-2021-44832) and is not stable for now. Log4j v1.x reached end of life in 2015. In order to improve logging and to avoid Log4j if possible, I propose to change logging from Log4j to Slf4j facade. This should allow users of this library to avoid Log4j dependency inside projects if they don't use it.

e-reznik commented 2 years ago

Any chance this pull request will be approved soon? Looking forward to using the new version without the vulnerability of log4j.

zippy1978 commented 2 years ago

Thanks a lot !