Update log4j core to 2.16 to patch vulnerability

[mariom64]

Details of log4j most recent vulnerability found:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046

[mccartney]

That has already been released. Also another version with log4j 2.17 has been released too.