log4j vuln fixed

David Diederichrequested to merge
cherry-pick-update-log4j into release/0.12

Original MR: !137 (merged) and !138 (merged)

Part of the #9 (closed) series

Merge request reports