[OOM-CERT-SERVICE]Fix Apache log4j2 vulnerability

[oom/platform/cert-service.git] / certServicePostProcessor / pom.xml

diff --git a/certServicePostProcessor/pom.xml b/certServicePostProcessor/pom.xml
index d150a9b..5ea3080 100644 (file)
--- a/certServicePostProcessor/pom.xml
+++ b/certServicePostProcessor/pom.xml
@@ -5,14 +5,14 @@
     <parent>
         <artifactId>oom-certservice</artifactId>
         <groupId>org.onap.oom.platform.cert-service</groupId>
-        <version>2.0.0-SNAPSHOT</version>
+        <version>2.5.0-SNAPSHOT</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
 
-    <artifactId>oom-truststore-merger</artifactId>
-    <version>2.0.0-SNAPSHOT</version>
-    <name>oom-truststore-merger</name>
-    <description>Truststore merging application</description>
+    <artifactId>oom-certservice-post-processor</artifactId>
+    <version>2.5.0-SNAPSHOT</version>
+    <name>oom-certservice-post-processor</name>
+    <description>An application which conducts certificate post-processing like: merging truststores, copying keystores.</description>
     <packaging>jar</packaging>
 
     <build>
@@ -166,8 +166,24 @@
             <artifactId>slf4j-api</artifactId>
         </dependency>
         <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-starter-log4j2</artifactId>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-slf4j-impl</artifactId>
+            <version>${log4j2.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-api</artifactId>
+            <version>${log4j2.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-core</artifactId>
+            <version>${log4j2.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-jul</artifactId>
+            <version>${log4j2.version}</version>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>