Upgrade to log4j2 2.17.1
Update to use version 2.17.1 to resolve log4shell vulnerability
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I5fff58c7cc59f4a95156fb0180a2d8aa070d4b30
diff --git a/pom.xml b/pom.xml
index a9dfa74..6b2b168 100755
--- a/pom.xml
+++ b/pom.xml
@@ -4,8 +4,8 @@
<parent>
<groupId>org.onap.ccsdk.parent</groupId>
- <artifactId>odlparent-lite</artifactId>
- <version>2.3.0</version>
+ <artifactId>spring-boot-25-starter-parent</artifactId>
+ <version>2.3.2</version>
<relativePath/>
</parent>
@@ -21,6 +21,17 @@
<name>ONAP</name>
</organization>
+ <modules>
+ <module>services</module>
+ <module>ms</module>
+ </modules>
+
+ <scm>
+ <connection>scm:git:ssh://git@${onap.git.host}/apps.git</connection>
+ <developerConnection>scm:git:ssh://${onap.git.host}:${onap.git.port}/${onap.git.project}/apps.git</developerConnection>
+ <url>${onap.git.protocol}://${onap.git.host}/projects/${onap.git.project}/repos/apps/browse</url>
+ </scm>
+
<properties>
<!--Don't set any language to let sonar enable multi-language support-->
<sonar.language/>
@@ -40,11 +51,6 @@
<jacoco.version>0.8.3</jacoco.version>
</properties>
- <modules>
- <module>services</module>
- <module>ms</module>
- </modules>
-
<build>
<plugins>
<plugin>
@@ -55,12 +61,6 @@
</plugins>
</build>
- <scm>
- <connection>scm:git:ssh://git@${onap.git.host}/apps.git</connection>
- <developerConnection>scm:git:ssh://${onap.git.host}:${onap.git.port}/${onap.git.project}/apps.git</developerConnection>
- <url>${onap.git.protocol}://${onap.git.host}/projects/${onap.git.project}/repos/apps/browse</url>
- </scm>
-
<profiles>
<profile>
<id>blackduck</id>
@@ -137,5 +137,4 @@
</build>
</profile>
</profiles>
-
</project>