From: Kruthi Bhat <krutbhat@att.com>
Date: Fri, 17 Dec 2021 19:16:27 +0000 (-0500)
Subject: VID-989: Log4j changes as part of Security vulnerability fix
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F33%2F126333%2F2;p=vid.git

VID-989: Log4j changes as part of Security vulnerability fix

Change-Id: I5999546b655eeace30806b055ac0e2fcfbf86c1d
Issue-ID: VID-989
Signed-off-by: krutbhat@att.com
---

diff --git a/epsdk-app-onap/pom.xml b/epsdk-app-onap/pom.xml
index 6eeafcd27..776274734 100755
--- a/epsdk-app-onap/pom.xml
+++ b/epsdk-app-onap/pom.xml
@@ -279,6 +279,16 @@
             <artifactId>epsdk-app-common</artifactId>
             <version>${epsdk.version}</version>
             <type>jar</type>
+	    <exclusions>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j-api</artifactId>
+		</exclusion>
+	    </exclusions>
         </dependency>
         <dependency>
             <groupId>org.onap.vid</groupId>
@@ -304,6 +314,16 @@
             <groupId>org.onap.portal.sdk</groupId>
             <artifactId>epsdk-core</artifactId>
             <version>${epsdk.version}</version>
+	    <exclusions>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j-api</artifactId>
+		</exclusion>
+	    </exclusions>
         </dependency>
         <dependency>
             <groupId>org.onap.portal.sdk</groupId>
diff --git a/vid-app-common/pom.xml b/vid-app-common/pom.xml
index 5e36c4c8c..ce7d0a9a0 100755
--- a/vid-app-common/pom.xml
+++ b/vid-app-common/pom.xml
@@ -572,12 +572,31 @@
             <artifactId>epsdk-app-common</artifactId>
             <version>${epsdk.version}</version>
             <type>jar</type>
+	    <exclusions>
+		<exclusion>
+		   <groupId>org.apache.logging.log4j</groupId>
+		   <artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+		   <groupId>org.apache.logging.log4j</groupId>
+		   <artifactId>log4j-api</artifactId>
+		</exclusion>
+	    </exclusions>
         </dependency>
-
         <dependency>
             <groupId>org.onap.portal.sdk</groupId>
             <artifactId>epsdk-core</artifactId>
             <version>${epsdk.version}</version>
+	    <exclusions>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j</artifactId>
+		</exclusion>
+		<exclusion>
+		    <groupId>org.apache.logging.log4j</groupId>
+		    <artifactId>log4j-api</artifactId>
+		</exclusion>
+	    </exclusions>
         </dependency>
         <dependency>
             <groupId>org.onap.portal.sdk</groupId>