There's a merged pull request on the void-packages repository

apache-jmeter: update to 5.4.3.
https://github.com/void-linux/void-packages/pull/35114

Description:
This update includes a fix for the log4j vulnerability.

#### Testing the changes
- I tested the changes in this PR:  briefly 

Apache Jmeter starts successfully after package installation.