upgrade log4j

Missing these exclusions and specifically settings log4j
libraries. Matches Istanbul.

Issue-ID: POLICY-4211
Change-Id: Ia0068c534744dbfb67b9bbd28a518fd2edf03a06
Signed-off-by: pdragosh <pd1248@att.com>

diff --git a/integration/pom.xml b/integration/pom.xml
index 067dd91..0bb81d1 100644 (file)
--- a/integration/pom.xml
+++ b/integration/pom.xml
@@ -237,7 +237,7 @@
             <dependency>
                 <groupId>com.google.code.gson</groupId>
                 <artifactId>gson</artifactId>
-                <version>2.8.6</version>
+                <version>2.8.9</version>
             </dependency>
             <dependency>
                 <groupId>org.json</groupId>
@@ -291,8 +291,26 @@
                         <groupId>io.springfox</groupId>
                         <artifactId>springfox-boot-starter</artifactId>
                     </exclusion>
+                   <exclusion>
+                        <groupId>org.apache.logging.log4j</groupId>
+                        <artifactId>log4j-api</artifactId>
+                    </exclusion>
+                    <exclusion>
+                        <groupId>org.apache.logging.log4j</groupId>
+                        <artifactId>log4j-to-slf4j</artifactId>
+                    </exclusion>
                 </exclusions>
             </dependency>
+            <dependency>
+                <groupId>org.apache.logging.log4j</groupId>
+                <artifactId>log4j-api</artifactId>
+                <version>2.17.1</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.logging.log4j</groupId>
+                <artifactId>log4j-to-slf4j</artifactId>
+                <version>2.17.1</version>
+            </dependency>
 
             <!-- AAF Client -->
             <dependency>