From 1f7e13887217e1ff5022358108194e3c378ffacf Mon Sep 17 00:00:00 2001
From: pdragosh <pd1248@att.com>
Date: Wed, 3 Aug 2022 16:04:58 -0500
Subject: upgrade log4j

Missing these exclusions and specifically settings log4j
libraries. Matches Istanbul.

Issue-ID: POLICY-4211
Change-Id: Ia0068c534744dbfb67b9bbd28a518fd2edf03a06
Signed-off-by: pdragosh <pd1248@att.com>
---
 integration/pom.xml | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

(limited to 'integration')

diff --git a/integration/pom.xml b/integration/pom.xml
index 067dd911..0bb81d17 100644
--- a/integration/pom.xml
+++ b/integration/pom.xml
@@ -237,7 +237,7 @@
             <dependency>
                 <groupId>com.google.code.gson</groupId>
                 <artifactId>gson</artifactId>
-                <version>2.8.6</version>
+                <version>2.8.9</version>
             </dependency>
             <dependency>
                 <groupId>org.json</groupId>
@@ -291,8 +291,26 @@
                         <groupId>io.springfox</groupId>
                         <artifactId>springfox-boot-starter</artifactId>
                     </exclusion>
+		    <exclusion>
+                        <groupId>org.apache.logging.log4j</groupId>
+                        <artifactId>log4j-api</artifactId>
+                    </exclusion>
+                    <exclusion>
+                        <groupId>org.apache.logging.log4j</groupId>
+                        <artifactId>log4j-to-slf4j</artifactId>
+                    </exclusion>
                 </exclusions>
             </dependency>
+            <dependency>
+                <groupId>org.apache.logging.log4j</groupId>
+                <artifactId>log4j-api</artifactId>
+                <version>2.17.1</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.logging.log4j</groupId>
+                <artifactId>log4j-to-slf4j</artifactId>
+                <version>2.17.1</version>
+            </dependency>
 
             <!-- AAF Client -->
             <dependency>
-- 
cgit 1.2.3-korg