diff --git a/build.gradle b/build.gradle
index 554be28b31..5e9d65dea0 100644
--- a/build.gradle
+++ b/build.gradle
@@ -37,7 +37,7 @@ plugins {
 buildDir = 'gradle-build'
 
 ext {
-    securityPluginVersion = '1.2.1.0'
+    securityPluginVersion = '1.2.2.0'
     isSnapshot = "true" == System.getProperty("build.snapshot", "true")
 }
 
@@ -67,7 +67,7 @@ ospackage {
     user 'root'
     permissionGroup 'root'
 
-    requires('opensearch-oss', "1.2.1", EQUAL)
+    requires('opensearch-oss', "1.2.2", EQUAL)
     packager = 'Amazon'
     vendor = 'Amazon'
     os = 'LINUX'
diff --git a/plugin-descriptor.properties b/plugin-descriptor.properties
index d61666bf3f..f878ea1f7b 100644
--- a/plugin-descriptor.properties
+++ b/plugin-descriptor.properties
@@ -3,7 +3,7 @@
 description=Provide access control related features for OpenSearch 1.0.0
 #
 # 'version': plugin's version
-version=1.2.1.0-SNAPSHOT
+version=1.2.2.0-SNAPSHOT
 #
 # 'name': the plugin name
 name=opensearch-security
@@ -24,4 +24,4 @@ java.version=1.8
 # OpenSearch release. This version is checked when the plugin
 # is loaded so OpenSearch will refuse to start in the presence of
 # plugins with the incorrect opensearch.version.
-opensearch.version=1.2.1
+opensearch.version=1.2.2
diff --git a/pom.xml b/pom.xml
index 7ca6d88a10..2bf522e6c9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -34,7 +34,7 @@
     <groupId>org.opensearch</groupId>
     <artifactId>opensearch-security</artifactId>
     <packaging>jar</packaging>
-    <version>1.2.1.0-SNAPSHOT</version>
+    <version>1.2.2.0-SNAPSHOT</version>
     <name>OpenSearch Security</name>
     <description>OpenSearch Security</description>
     <url>https://github.com/opensearch-project/security</url>
@@ -68,12 +68,12 @@
         <maven.compiler.target>1.8</maven.compiler.target>
         <maven.compiler.release>8</maven.compiler.release>
 
-        <opensearch.version>1.2.1-SNAPSHOT</opensearch.version>
+        <opensearch.version>1.2.2-SNAPSHOT</opensearch.version>
 
         <!-- deps -->
         <netty-native.version>2.0.25.Final</netty-native.version>
         <bc.version>1.67</bc.version>
-        <log4j.version>2.15.0</log4j.version>
+        <log4j.version>2.16.0</log4j.version>
         <guava.version>25.1-jre</guava.version>
         <commons.cli.version>1.3.1</commons.cli.version>
         <jackson-databind.version>2.11.2</jackson-databind.version>
@@ -103,7 +103,7 @@
         <url>https://github.com/opensearch-project/security</url>
         <connection>scm:git:git@github.com:opensearch-project/security.git</connection>
         <developerConnection>scm:git:git@github.com:opensearch-project/security.git</developerConnection>
-        <tag>1.2.1.0</tag>
+        <tag>1.2.2.0</tag>
     </scm>
 
     <repositories>
diff --git a/release-notes/opensearch-security.release-notes-1.2.2.0.md b/release-notes/opensearch-security.release-notes-1.2.2.0.md
new file mode 100644
index 0000000000..d22d6857e4
--- /dev/null
+++ b/release-notes/opensearch-security.release-notes-1.2.2.0.md
@@ -0,0 +1,7 @@
+## 2021-12-14 Version 1.2.2.0
+
+Compatible with OpenSearch 1.2.2
+
+### Maintenance
+
+* Bumping log4j to 2.16.0 ([#1525](https://github.com/opensearch-project/security/pull/1525))