There is a new pull request by classabbyamp against master on the void-packages repository https://github.com/classabbyamp/void-packages apache-storm-2.4.0 https://github.com/void-linux/void-packages/pull/36484 apache-storm: update to 2.4.0. See #34534, removes vulnerable log4j #### Testing the changes - I tested the changes in this PR: **NO** I'm not sure how to test this, but it builds. A patch file from https://github.com/void-linux/void-packages/pull/36484.patch is attached