While looking at my systems because of the log4j security issues I noticed the
following:
I am running solr8 as part of my MacPorts mail server setup and it shows up
like this:
$ ps laxww|grep java
504 50615 50613 0 20 0 7594340 1316684 - S ?? 97:31.56
/usr/bin/java -server
Sent: Monday, December 13, 2021 at 12:18 AM
From: "Gerben Wierda"
> Which means that MacPorts solr8 runs using macOS native java and not one from
> MacPorts itself. I thought the MacPorts stuff was supposed to be fully
> independent (except for Xcode).
The JDK ports are an exception in that the
On Dec 11, 2021, at 23:54, fgyamauti2 fgyamauti2 wrote:
> The weird thing is that everything suspicious inside '/usr/local/etc' is a
> configuration file of stuff that is related to MacPorts. More precisely, I
> have suspicious folders named 'fonts' (from fontsconfig), 'gnutls',
> 'openldap', '
On Dec 12, 2021, at 19:10, Christopher Chavez wrote:
>> And shouldn’t ports that use java not depend on a java that comes with (old,
>> outdated) java’s in macOS? But install and use an open source version
>> instead? Or use the one from Oracle if available?
>
> Because JDK is not a lightweight
Java figures out which version to use from JAVA_HOME or
/Library/Java/JavaVirtualMachines. Are you sure that’s not a MacPorts version?
My native macOS java binary runs the last LTS jdk from MacPorts:
> sudo -u solr /usr/bin/java -version
> openjdk version "11.0.13" 2021-10-19
> OpenJDK Runtime E
BTW, in Xcode.app bundle (12.4),
/Applications/Xcode.app/Contents/SharedFrameworks/ContentDeliveryServices.framework/Versions/A/itms/share/OSGi-Bundles/org.apache.logging.log4j.core-2.11.2.jar
I imagine that will be getting updated not long after they realize it's there.
> On Dec 12, 2021, at 22:
