fix: dependency log4j sec issue (operator-framework#745)

csviri · csviri · commit 1ffe83f76cef · 2021-12-10T10:59:29.000+01:00
diff --git a/pom.xml b/pom.xml
@@ -43,7 +43,7 @@
         <junit.version>5.8.1</junit.version>
         <fabric8-client.version>5.10.1</fabric8-client.version>
         <slf4j.version>1.7.32</slf4j.version>
-        <log4j.version>2.14.1</log4j.version>
+        <log4j.version>2.15.0</log4j.version>
         <mokito.version>4.1.0</mokito.version>
         <commons-lang3.version>3.12.0</commons-lang3.version>
         <auto-service.version>1.0.1</auto-service.version>
diff --git a/sample-operators/tomcat-operator/pom.xml b/sample-operators/tomcat-operator/pom.xml
@@ -35,7 +35,6 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-slf4j-impl</artifactId>
-            <version>2.13.3</version>
         </dependency>
         <dependency>
             <groupId>org.takes</groupId>
diff --git a/smoke-test-samples/spring-boot-plain/pom.xml b/smoke-test-samples/spring-boot-plain/pom.xml
@@ -45,6 +45,11 @@
                 </exclusion>
             </exclusions>
         </dependency>
+        <dependency>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-api</artifactId>
+            <version>${log4j.version}</version>
+        </dependency>
     </dependencies>
 
     <dependencyManagement>
