Update log4j to fix RCE zero day.

[snuyanzin]

2.0 <= Apache log4j2 <= 2.14.1 have a RCE zero day.
https://www.lunasec.io/docs/blog/log4j-zero-day/

[leonardBang]

@snuyanzin Thanks for the timely fix, LGTM

[leonardBang]

@snuyanzin Could you update the version to 2.16.0 ? The Log4J team release a better version :
https://twitter.com/brunoborges/status/1470622226634268685?t=qfzL-7Ae9lloayVVUfCI9A&s=19

[snuyanzin]

@leonardBang , done

[leonardBang]

@leonardBang , done

Cool, will merge once the CI passed.

[snuyanzin]

suddenly it fails on mongo connector...

	at java.lang.Thread.sleep(Native Method)
	at com.ververica.cdc.connectors.mongodb.table.MongoDBConnectorITCase.waitForSinkSize(MongoDBConnectorITCase.java:480)
	at com.ververica.cdc.connectors.mongodb.table.MongoDBConnectorITCase.testConsumingAllEvents(MongoDBConnectorITCase.java:149)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

now sure it is related to log4j updates..
Is there a way to restart the build to see if it is reproducible?

[GOODBOY008]

	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

Mongodb connector test sometimes to fail.I had create a issue for this.

[leonardBang]

Note: Fink CDC Project only uses log4j2 in test and won‘t package the log4j2 dependency which means Flink CDC connector won't be influenced by CVE-2021-44228/CVE-2021-45046.