升级log4j2到安全版本，防止漏洞风险

RuoYi

2021-12-14 e1c7115d8c08d188f2c6a49fd07ebb8d3de11ed0

 pom.xml

@@ -6,14 +6,14 @@
   

    <groupId>com.ruoyi</groupId>

    <artifactId>ruoyi</artifactId>

    <version>3.7.0</version>

    <version>3.8.0</version>



    <name>ruoyi</name>

    <url>http://www.ruoyi.vip</url>

    <description>若依管理系统</description>

    

    <properties>

        <ruoyi.version>3.7.0</ruoyi.version>

        <ruoyi.version>3.8.0</ruoyi.version>

        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>

        <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>

        <java.version>1.8</java.version>

@@ -31,8 +31,9 @@
        <commons.fileupload.version>1.4</commons.fileupload.version>

        <commons.collections.version>3.2.2</commons.collections.version>

        <poi.version>4.1.2</poi.version>

        <velocity.version>1.7</velocity.version>

        <velocity.version>2.3</velocity.version>

        <jwt.version>0.9.1</jwt.version>

        <log4j2.version>2.16.0</log4j2.version>

    </properties>

   

    <!-- 依赖声明 -->

@@ -132,14 +133,8 @@
            <!-- velocity代码生成使用模板 -->

            <dependency>

                <groupId>org.apache.velocity</groupId>

                <artifactId>velocity</artifactId>

                <artifactId>velocity-engine-core</artifactId>

                <version>${velocity.version}</version>

                <exclusions>

                    <exclusion>

                        <groupId>commons-collections</groupId>

                        <artifactId>commons-collections</artifactId>

                    </exclusion>

                </exclusions>

            </dependency>



            <!-- collections工具类 -->

@@ -156,6 +151,19 @@
                <version>${fastjson.version}</version>

            </dependency>



            <!-- log4j日志组件 -->

            <dependency>

                <groupId>org.apache.logging.log4j</groupId>

                <artifactId>log4j-api</artifactId>

                <version>${log4j2.version}</version>

            </dependency>

            
            <dependency>

                <groupId>org.apache.logging.log4j</groupId>

                <artifactId>log4j-to-slf4j</artifactId>

                <version>${log4j2.version}</version>

            </dependency>



            <!-- Token生成与解析-->

            <dependency>

                <groupId>io.jsonwebtoken</groupId>