JAL-3949 upgraded log4j to 2.17.1 (no actual known vulnerabilities\!), though this...