From 32735e3865a28249d12c357154392ce5f3fa9a47 Mon Sep 17 00:00:00 2001
From: Michael Schulte <65006436+mschulte-tsi@users.noreply.github.com>
Date: Wed, 15 Dec 2021 12:06:34 +0100
Subject: [PATCH] Fix/Bump Log4j to 2.16 (#255)

* Bump Log4J Version to 2.16

* Bump Spring Version to 2.5.7

* bump verification-server version

Co-authored-by: Andreas Scheibal <andreas.scheibal@t-systems.com>
---
 pom.xml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 3cf427c0..8db75338 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
 
   <groupId>app.coronawarn.verification</groupId>
   <artifactId>cwa-verification-server</artifactId>
-  <version>1.5.3-SNAPSHOT</version>
+  <version>1.5.4-SNAPSHOT</version>
   <packaging>jar</packaging>
 
   <name>cwa-verification-server</name>
@@ -34,7 +34,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
     <!-- dependencies -->
-    <spring.boot.version>2.5.4</spring.boot.version>
+    <spring.boot.version>2.5.7</spring.boot.version>
     <spring-security.version>5.3.10.RELEASE</spring-security.version>
     <spring.cloud.version>2020.0.4</spring.cloud.version>
     <lombok.version>1.18.16</lombok.version>
@@ -91,6 +91,12 @@
         <artifactId>liquibase-core</artifactId>
         <version>${liquibase.version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-bom</artifactId>
+        <version>2.16.0</version>
+        <scope>import</scope>
+      </dependency>
     </dependencies>
   </dependencyManagement>