Adding extra dependencyManagement line to explicitly set the log4j version

pom.xml

 <?xml version="1.0" encoding="UTF-8"?>
-<!-- Copyright 2020 IBM Corp. All Rights Reserved. Licensed under the Apache 
-	License, Version 2.0 (the "License"); you may not use this file except in 
-	compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 
-	Unless required by applicable law or agreed to in writing, software distributed 
-	under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES 
-	OR CONDITIONS OF ANY KIND, either express or implied. See the License for 
+<!-- Copyright 2020 IBM Corp. All Rights Reserved. Licensed under the Apache
+	License, Version 2.0 (the "License"); you may not use this file except in
+	compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+	Unless required by applicable law or agreed to in writing, software distributed
+	under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+	OR CONDITIONS OF ANY KIND, either express or implied. See the License for
 	the specific language governing permissions and limitations under the License. -->
 
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
@@ -17,7 +17,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>2.1.7.RELEASE</version>
+        <version>2.4.5</version>
         <relativePath />
     </parent>
 
@@ -30,6 +30,7 @@
 		<maven.compiler.target>1.8</maven.compiler.target>
 		<os-core-common.version>0.13.0-rc2</os-core-common.version>
 		<os-core-lib-ibm.version>0.13.0-SNAPSHOT</os-core-lib-ibm.version>
+		<log4j2.version>2.15.0</log4j2.version>
 	</properties>
 
 	<licenses>
@@ -49,6 +50,14 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+
+            <dependency>
+	            <groupId>org.apache.logging.log4j</groupId>
+	            <artifactId>log4j-bom</artifactId>
+	            <version>${log4j2.version}</version>
+	            <type>pom</type>
+	            <scope>import</scope>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 
@@ -59,7 +68,7 @@
 			<artifactId>os-core-common</artifactId>
 			<version>${os-core-common.version}</version>
 		</dependency>
-		
+
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-security</artifactId>
@@ -72,7 +81,7 @@
 			<groupId>org.springframework.security</groupId>
 			<artifactId>spring-security-oauth2-resource-server</artifactId>
 		</dependency>
-        
+
         <!-- IBM Services -->
 
 		<dependency>
@@ -80,7 +89,7 @@
 		    <artifactId>amqp-10-jms-spring-boot-starter</artifactId>
 		    <version>2.4.4</version>
 		</dependency>
-        
+
 
 		<dependency>
 			<groupId>com.ibm.cos</groupId>