log4j CVEs

Another one in few days, to fix https://nvd.nist.gov/vuln/detail/CVE-2021-44832:
- https://logging.apache.org/log4j/2.x/security.html

Current list:
- CVE-2021-4104
- CVE-2021-44228
- CVE-2021-44832
- CVE-2021-45046
- CVE-2021-45105

Note that there is a logback CVE too:
- CVE-2021-42550