From 524ad4e6ddc04f2f0cfacb33f42c2f022629bbbb Mon Sep 17 00:00:00 2001
From: abbfun <819589789@qq.com>
Date: Mon, 23 May 2022 15:36:18 +0800
Subject: [PATCH] fastjson 版本升级 fastjson <= 1.2.80 存在反序列化任意代码执行漏洞
---
pom.xml | 27 +++++++--------------------
1 files changed, 7 insertions(+), 20 deletions(-)
diff --git a/pom.xml b/pom.xml
index 1b838b0..e1730cb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -6,14 +6,14 @@
<groupId>com.ruoyi</groupId>
<artifactId>ruoyi</artifactId>
- <version>3.8.1</version>
+ <version>3.8.2</version>
<name>ruoyi</name>
<url>http://www.ruoyi.vip</url>
<description>若依管理系统</description>
<properties>
- <ruoyi.version>3.8.1</ruoyi.version>
+ <ruoyi.version>3.8.2</ruoyi.version>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<java.version>1.8</java.version>
@@ -22,11 +22,10 @@
<bitwalker.version>1.21</bitwalker.version>
<swagger.version>3.0.0</swagger.version>
<kaptcha.version>2.3.2</kaptcha.version>
- <mybatis-spring-boot.version>2.2.0</mybatis-spring-boot.version>
- <pagehelper.boot.version>1.4.0</pagehelper.boot.version>
- <fastjson.version>1.2.79</fastjson.version>
- <oshi.version>6.1.2</oshi.version>
- <jna.version>5.10.0</jna.version>
+ <mybatis-spring-boot.version>2.2.2</mybatis-spring-boot.version>
+ <pagehelper.boot.version>1.4.1</pagehelper.boot.version>
+ <fastjson.version>1.2.83</fastjson.version>
+ <oshi.version>6.1.6</oshi.version>
<commons.io.version>2.11.0</commons.io.version>
<commons.fileupload.version>1.4</commons.fileupload.version>
<commons.collections.version>3.2.2</commons.collections.version>
@@ -43,7 +42,7 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-dependencies</artifactId>
- <version>2.5.9</version>
+ <version>2.5.13</version>
<type>pom</type>
<scope>import</scope>
</dependency>
@@ -81,18 +80,6 @@
<groupId>com.github.oshi</groupId>
<artifactId>oshi-core</artifactId>
<version>${oshi.version}</version>
- </dependency>
-
- <dependency>
- <groupId>net.java.dev.jna</groupId>
- <artifactId>jna</artifactId>
- <version>${jna.version}</version>
- </dependency>
-
- <dependency>
- <groupId>net.java.dev.jna</groupId>
- <artifactId>jna-platform</artifactId>
- <version>${jna.version}</version>
</dependency>
<!-- Swagger3依赖 -->
--
Gitblit v1.9.2