Vulnerable packages update

Exclude log4j 1.2.17 from being pulled

Issue-ID: SDC-3572
Signed-off-by: ChrisC <christophe.closset@intl.att.com>
Change-Id: I3fd25ddcd5f8e2089beed2d66bff82c2a3d65f48
1 file changed