log4j version upgrade for CVE-2021-44228

[yakirgb]

Based on : GHSA-jfh8-c2jp-5v3q and https://www.lunasec.io/docs/blog/log4j-zero-day/
Log4j versions prior to 2.15.0 are subject to a remote code execution vulnerability via the ldap JNDI parser.
Current version: 2.1

[fstab]

For comments see #726.