The log4j2 library is now at version 2.11.2 and Openfire should be updated with this version.
https://logging.apache.org/log4j/2.x/