From b6f21f451d4ed02c644dd1bfb7c457ed2e0cfe80 Mon Sep 17 00:00:00 2001
From: RuoYi <yzz_ivy@163.com>
Date: Thu, 30 Dec 2021 14:48:33 +0800
Subject: [PATCH] 升级log4j2到2.17.1,防止漏洞风险
---
pom.xml | 8 ++++----
1 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/pom.xml b/pom.xml
index 0dbfa80..0154633 100644
--- a/pom.xml
+++ b/pom.xml
@@ -17,7 +17,7 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<java.version>1.8</java.version>
- <spring-boot.version>2.5.6</spring-boot.version>
+ <spring-boot.version>2.5.8</spring-boot.version>
<spring-cloud.version>2020.0.4</spring-cloud.version>
<spring-cloud-alibaba.version>2021.1</spring-cloud-alibaba.version>
<alibaba.nacos.version>2.0.3</alibaba.nacos.version>
@@ -33,14 +33,14 @@
<commons.io.version>2.11.0</commons.io.version>
<commons.fileupload.version>1.4</commons.fileupload.version>
<velocity.version>2.3</velocity.version>
- <fastjson.version>1.2.78</fastjson.version>
+ <fastjson.version>1.2.79</fastjson.version>
<jjwt.version>0.9.1</jjwt.version>
<minio.version>8.2.2</minio.version>
<poi.version>4.1.2</poi.version>
<common-pool.version>2.10.0</common-pool.version>
<commons-collections.version>3.2.2</commons-collections.version>
<transmittable-thread-local.version>2.12.2</transmittable-thread-local.version>
- <log4j2.version>2.15.0</log4j2.version>
+ <log4j2.version>2.17.1</log4j2.version>
</properties>
<!-- 依赖声明 -->
@@ -197,7 +197,7 @@
<artifactId>log4j-api</artifactId>
<version>${log4j2.version}</version>
</dependency>
-
+
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-to-slf4j</artifactId>
--
Gitblit v1.9.3