log4j vuln fix

pom.xml

@@ -25,7 +25,8 @@
 		<java.version>8</java.version>
 		<maven.compiler.target>${java.version}</maven.compiler.target>
 		<maven.compiler.source>${java.version}</maven.compiler.source>
-		<os-core-common.version>0.12.0</os-core-common.version>
+		<os-core-common.version>0.13.0-rc3</os-core-common.version>
+		<log4j2.version>2.16.0</log4j2.version>
 	</properties>
 
 	<licenses>
@@ -71,6 +72,17 @@
 				<artifactId>jackson-annotations</artifactId>
 				<version>2.12.3</version>
 			</dependency>
+			
+			<dependency>
+                <groupId>org.apache.logging.log4j</groupId>
+                <artifactId>log4j-to-slf4j</artifactId>
+                <version>${log4j2.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.logging.log4j</groupId>
+                <artifactId>log4j-api</artifactId>
+                <version>${log4j2.version}</version>
+            </dependency>
 		</dependencies>
 	</dependencyManagement>
 

provider/notification-ibm/pom.xml

@@ -44,7 +44,7 @@
         <dependency>
             <groupId>org.opengroup.osdu</groupId>
             <artifactId>os-core-lib-ibm</artifactId>
-            <version>0.13.0-SNAPSHOT</version>
+            <version>0.13.0-rc4</version>
         </dependency>
 
         <dependency>