Merge "Update log4j to deal with CVE-2021-44228"

Author: margaretha

Changes

@@ -1,11 +1,12 @@
-0.37 2021-06-24
+0.37 2021-12-10
     - [feature] Introduced query references in Poliqarp (diewald)
     - [bugfix] Ignore empty corpus queries (diewald)
     - [bugfix] Fix handling of apostrophes in multiword and regex
       values in virtual corpora (#85; diewald)
     - [feature] Added getVersion() and getName() methods (diewald)
-    - [bugfix] Updated plexus-utils used in antlr4-maven-plugin 
+    - [security] Updated plexus-utils used in antlr4-maven-plugin 
       manually due to CVE-2017-1000487 (margaretha)
+    - [security] Updated log4j due to CVE-2021-44228 (diewald)
 
 0.36 2020-07-24
     - [security] Upgraded version of Google Guava

pom.xml

@@ -40,7 +40,7 @@
 		<antlr4.version>4.9.3</antlr4.version>
 		<antlr3.version>3.5.2</antlr3.version>
 		<java.version>1.8</java.version>
-		<log4j.version>2.14.1</log4j.version>
+		<log4j.version>[2.15.0,)</log4j.version>
 	</properties>
 
 	<repositories>