Upgrade log4j to 2.16.0 for CVE-2021-45046 (apache#7903)

LICENSE-binary

@@ -333,10 +333,11 @@ org.apache.httpcomponents:httpmime:4.5.3
 org.apache.kafka:kafka-clients:2.0.0
 org.apache.kafka:kafka_2.10:0.9.0.1
 org.apache.kafka:kafka_2.11:2.0.0
-org.apache.logging.log4j:log4j-1.2-api:2.11.2
-org.apache.logging.log4j:log4j-api:2.11.2
-org.apache.logging.log4j:log4j-core:2.11.2
-org.apache.logging.log4j:log4j-slf4j-impl:2.11.2
+org.apache.logging.log4j:log4j-1.2-api:2.16.0
+org.apache.logging.log4j:log4j-api:2.16.0
+org.apache.logging.log4j:log4j-core:2.16.0
+org.apache.logging.log4j:log4j-slf4j-impl:2.16.0
+>>>>>>> 8349bbecde (Upgrade log4j to 2.16.0 for CVE-2021-45046 (#7903))
 org.apache.lucene:lucene-analyzers-common:8.2.0
 org.apache.lucene:lucene-core:8.2.0
 org.apache.lucene:lucene-queries:8.2.0

pom.xml

@@ -141,7 +141,9 @@
     <!-- helix-core, spark-core use libraries from io.dropwizard.metrics -->
     <dropwizard-metrics.version>4.1.2</dropwizard-metrics.version>
     <snappy-java.version>1.1.1.7</snappy-java.version>
-    <log4j.version>2.11.2</log4j.version>
+    <zstd-jni.version>1.4.9-5</zstd-jni.version>
+    <lz4-java.version>1.7.1</lz4-java.version>
+    <log4j.version>2.16.0</log4j.version>
     <netty.version>4.1.54.Final</netty.version>
     <jts.version>1.16.1</jts.version>
     <h3.version>3.0.3</h3.version>