From d5500a4f8ecd36190b51a5bf488e4cc5edca1fd0 Mon Sep 17 00:00:00 2001
From: Kruthi Bhat <krutbhat@att.com>
Date: Fri, 17 Dec 2021 14:16:27 -0500
Subject: VID-989: Log4j changes as part of Security vulnerability fix

Change-Id: I5999546b655eeace30806b055ac0e2fcfbf86c1d
Issue-ID: VID-989
Signed-off-by: krutbhat@att.com
---
 epsdk-app-onap/pom.xml | 20 ++++++++++++++++++++
 vid-app-common/pom.xml | 21 ++++++++++++++++++++-
 2 files changed, 40 insertions(+), 1 deletion(-)

diff --git a/epsdk-app-onap/pom.xml b/epsdk-app-onap/pom.xml
index 6eeafcd27..776274734 100755
--- a/epsdk-app-onap/pom.xml
+++ b/epsdk-app-onap/pom.xml
@@ -279,6 +279,16 @@
             <artifactId>epsdk-app-common</artifactId>
             <version>${epsdk.version}</version>
             <type>jar</type>
+	    <exclusions>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j-api</artifactId>
+		</exclusion>
+	    </exclusions>
         </dependency>
         <dependency>
             <groupId>org.onap.vid</groupId>
@@ -304,6 +314,16 @@
             <groupId>org.onap.portal.sdk</groupId>
             <artifactId>epsdk-core</artifactId>
             <version>${epsdk.version}</version>
+	    <exclusions>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j-api</artifactId>
+		</exclusion>
+	    </exclusions>
         </dependency>
         <dependency>
             <groupId>org.onap.portal.sdk</groupId>
diff --git a/vid-app-common/pom.xml b/vid-app-common/pom.xml
index 5e36c4c8c..ce7d0a9a0 100755
--- a/vid-app-common/pom.xml
+++ b/vid-app-common/pom.xml
@@ -572,12 +572,31 @@
             <artifactId>epsdk-app-common</artifactId>
             <version>${epsdk.version}</version>
             <type>jar</type>
+	    <exclusions>
+		<exclusion>
+		   <groupId>org.apache.logging.log4j</groupId>
+		   <artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+		   <groupId>org.apache.logging.log4j</groupId>
+		   <artifactId>log4j-api</artifactId>
+		</exclusion>
+	    </exclusions>
         </dependency>
-
         <dependency>
             <groupId>org.onap.portal.sdk</groupId>
             <artifactId>epsdk-core</artifactId>
             <version>${epsdk.version}</version>
+	    <exclusions>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j-api</artifactId>
+		</exclusion>
+	    </exclusions>
         </dependency>
         <dependency>
             <groupId>org.onap.portal.sdk</groupId>
-- 
cgit 1.2.3-korg