How to Install and Uninstall log4j-cve-2021-44228-hotpatch.noarch Package on Amazon Linux 2

Last updated: May 06,2024

1. Install "log4j-cve-2021-44228-hotpatch.noarch" package

Please follow the step by step instructions below to install log4j-cve-2021-44228-hotpatch.noarch on Amazon Linux 2


    
        
            $
        

        
            
                sudo yum makecache
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo yum install
            
                        
                log4j-cve-2021-44228-hotpatch.noarch
            
                    
    
    Copied

2. Uninstall "log4j-cve-2021-44228-hotpatch.noarch" package

In this section, we are going to explain the necessary steps to uninstall log4j-cve-2021-44228-hotpatch.noarch on Amazon Linux 2:


    
        
            $
        

        
            
                sudo yum remove 
            
                        
                log4j-cve-2021-44228-hotpatch.noarch
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo yum autoremove
            
                    
    
    Copied

3. Information about the log4j-cve-2021-44228-hotpatch.noarch package on Amazon Linux 2

Loaded plugins: ovl, priorities
Available Packages
Name : log4j-cve-2021-44228-hotpatch
Arch : noarch
Version : 1.1
Release : 16.amzn2
Size : 148 k
Repo : amzn2-core/2/x86_64
Summary : log4j CVE-2021-44228 Hotpatch
URL : https://github.com/corretto/hotpatch-for-apache-log4j2
License : ASL 2.0
Description : This is a tool which injects a Java agent into a running JVM
: process. The agent will attempt to patch the lookup() method of
: all loaded org.apache.logging.log4j.core.lookup.JndiLookup
: instances to unconditionally return the string "Patched
: JndiLookup::lookup()". It is designed to address the
: CVE-2021-44228 remote code execution vulnerability in Log4j
: without restarting the Java process.
:
: This package contains the built hotpatch JARs and a script to
: apply them to all running JVMs. The script is invoked by systemd.