Hello, Did I misunderstood? My impression was that Pdfsam in Debian 11 is not built upon log4j but upon logback, which description presents as a successor of log4j? So no need to upgrade anything? https://packages.debian.org/bullseye/pdfsam https://packages.debian.org/bullseye/liblogback-java