From bb1af390a7025247fdef1e63ce871b47e8e369e6 Mon Sep 17 00:00:00 2001
From: RuoYi <yzz_ivy@163.com>
Date: 星期四, 30 十二月 2021 14:41:25 +0800
Subject: [PATCH] 升级log4j2到2.17.1，防止漏洞风险
---
pom.xml | 12 ++++++------
1 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/pom.xml b/pom.xml
index df250e8..ecbce07 100644
--- a/pom.xml
+++ b/pom.xml
@@ -24,16 +24,16 @@
<kaptcha.version>2.3.2</kaptcha.version>
<mybatis-spring-boot.version>2.2.0</mybatis-spring-boot.version>
<pagehelper.boot.version>1.4.0</pagehelper.boot.version>
- <fastjson.version>1.2.78</fastjson.version>
- <oshi.version>5.8.2</oshi.version>
- <jna.version>5.9.0</jna.version>
+ <fastjson.version>1.2.79</fastjson.version>
+ <oshi.version>5.8.6</oshi.version>
+ <jna.version>5.10.0</jna.version>
<commons.io.version>2.11.0</commons.io.version>
<commons.fileupload.version>1.4</commons.fileupload.version>
<commons.collections.version>3.2.2</commons.collections.version>
<poi.version>4.1.2</poi.version>
<velocity.version>2.3</velocity.version>
+ <log4j2.version>2.17.1</log4j2.version>
<jwt.version>0.9.1</jwt.version>
- <log4j2.version>2.16.0</log4j2.version>
</properties>
<!-- 依赖声明 -->
@@ -44,7 +44,7 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-dependencies</artifactId>
- <version>2.5.6</version>
+ <version>2.5.8</version>
<type>pom</type>
<scope>import</scope>
</dependency>
@@ -157,7 +157,7 @@
<artifactId>log4j-api</artifactId>
<version>${log4j2.version}</version>
</dependency>
-
+
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-to-slf4j</artifactId>
--
Gitblit v1.9.2