update log4j and commons-io