Upgrade log4j to 2.15.0 - CVE-2021-44228

[rhowe]

All Submissions:

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?

New Feature Submissions:

1. TBD Does your submission pass tests?
2. N/A Have you lint your code locally prior to submission?

Changes to Core Features:

N/A

[CLAassistant]

)
All committers have signed the CLA.

[cmaglie]

Thanks @rhowe!

Here the sha256 checksum of the binaries:

e7048ad52e3b6f1267b7ceb2c07200a5ce61271bcf59f98fd238bf60e4137932  log4j-core-2.15.0.jar
254d2e61e530b9b210ddd1ae599e91ee8e37a5bfcafaeba98cfc338ca6eea3e9  log4j-api-2.15.0.jar

they match with the distributed binaries from apache.org

[ItsIgnacioPortal]

Great. When will this hotfix release come out?

[per1234]

Please see this page for all the related information from Arduino:

https://support.arduino.cc/hc/en-us/articles/4412377144338-Arduino-s-response-to-Log4j2-vulnerability-CVE-2021-44228