'How to patch log4j on Mac for ActiveMQ?

I have got installed ActiveMQ on Mac using brew but have been identified as having a critical vulnerability related to the log4j security issue, and so it requires a patch.

In this case, how can I do patching log4j?

/System/Volumes/Data/usr/local/Cellar/activemq/5.16.3/libexec/lib/optional/log4j-1.2.17.jar

/usr/local/Cellar/activemq/5.16.3/libexec/lib/optional/log4j-1.2.17.jar



Solution 1:[1]

Since you're using ActiveMQ 5.16.3 you can simply upgrade to 5.16.4 which replaced Log4j 1.2.17 with Reload4j 1.2.19. See AMQ-8472 for more details.

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 Justin Bertram