Started by user tophorsekj Running as SYSTEM Building in workspace /data/publish/jenkins-data/workspace/qdkj-bootdo [qdkj-bootdo] $ /bin/sh -xe /data/setupfiles/tomcat7-8058-jdk1.8/temp/jenkins3019375405980718221.sh + /data/scripts/release/qdkj/bootdo.py bootdo.json --mainclass=com.bootdo.BootdoApplication '--verid=r817 | 2021-09-18 17:40:19| publish | 源码版本:r215 | 解决腾讯通知的安全问题:升级shiro到1.8.0版本 【安全通知】Apache Shiro身份验证绕过漏洞安全风险通告(CVE-2021-41303)Apache Shiro是一个强大且易用的Java安全框架,常用于身份验证、授权、密码和会话管理。 ' '--json={ "server.port": 8081, "spring.profiles.active":"dev", "bootdo.uploadPath":"/data/files/bootdo", "spring.datasource.url":"jdbc:mysql://10.100.0.3:3306/bootdo_qdkj?useUnicode=true&characterEncoding=utf8", "spring.datasource.username":"qdkj", "spring.datasource.password":"AFBD2342ddd%", "spring.redis.host":"127.0.0.1", "spring.redis.port":"26379", "spring.redis.password":"Redis20210224%" }' --serverlist= cat /data/publish/bootdo/WEB-INF/classes/app.pid | xarg s -r kill [root@VM-0-14-centos ~]# svn cleanup /data/publish/bootdo [root@VM-0-14-centos ~]# svn update /data/publish/bootdo --force --accept theirs -full -r r817 正在升级 '/data/publish/bootdo': D /data/publish/bootdo/META-INF/MANIFEST.MF D /data/publish/bootdo/WEB-INF/classes/com/bootdo/rip A /data/publish/bootdo/WEB-INF/classes/com/bootdo/video A /data/publish/bootdo/WEB-INF/classes/com/bootdo/video/controller A /data/publish/bootdo/WEB-INF/classes/com/bootdo/video/service A /data/publish/bootdo/WEB-INF/classes/static/js/appjs/video A /data/publish/bootdo/WEB-INF/classes/static/js/appjs/video/ys D /data/publish/bootdo/WEB-INF/classes/templates/rip A /data/publish/bootdo/WEB-INF/classes/templates/video A /data/publish/bootdo/WEB-INF/classes/templates/video/ys D /data/publish/bootdo/WEB-INF/lib/commons-beanutils-1.8.3.jar D /data/publish/bootdo/WEB-INF/lib/shiro-ehcache-1.4.0.jar D /data/publish/bootdo/WEB-INF/lib/shiro-lang-1.4.0.jar D /data/publish/bootdo/WEB-INF/lib/shiro-cache-1.4.0.jar D /data/publish/bootdo/WEB-INF/lib/shiro-web-1.3.2.jar D /data/publish/bootdo/WEB-INF/lib/shiro-spring-1.3.2.jar D /data/publish/bootdo/WEB-INF/lib/shiro-core-1.3.2.jar A /data/publish/bootdo/WEB-INF/classes/com/bootdo/video/controller/YSController.class A /data/publish/bootdo/WEB-INF/classes/com/bootdo/video/service/YSService.class A /data/publish/bootdo/WEB-INF/classes/com/bootdo/common/config/TomcatConfig.class U /data/publish/bootdo/WEB-INF/classes/com/bootdo/system/config/ShiroConfig.class U /data/publish/bootdo/WEB-INF/classes/static/js/appjs/biz/map/mapGeoq.js A /data/publish/bootdo/WEB-INF/classes/static/js/appjs/video/ys/index.js U /data/publish/bootdo/WEB-INF/classes/templates/biz/map/mapGeoq.html A /data/publish/bootdo/WEB-INF/classes/templates/video/ys/index.html U /data/publish/bootdo/WEB-INF/classes/application-dev.yml U /data/publish/bootdo/WEB-INF/classes/application-prod.yml A /data/publish/bootdo/WEB-INF/lib/commons-beanutils-1.9.4.jar A /data/publish/bootdo/WEB-INF/lib/encoder-1.2.2.jar A /data/publish/bootdo/WEB-INF/lib/shiro-cache-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-config-core-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-config-ogdl-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-core-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-crypto-cipher-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-crypto-core-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-crypto-hash-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-ehcache-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-event-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-lang-1.8.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-spring-1.6.0.jar A /data/publish/bootdo/WEB-INF/lib/shiro-web-1.6.0.jar 更新到版本 817。 [root@VM-0-14-centos ~]# find /data/publish/bootdo -name '*.jk1000' [root@VM-0-14-centos ~]# cd /data/publish/bootdo/WEB-INF/classes [root@VM-0-14-centos classes]# nohup /data/setupfiles/jdk/jdk1.8.0_161/bin/java -Dspring.application.json='{ > "server.port": 8081, > "spring.profiles.active":"dev", > "bootdo.uploadPath":"/data/files/bootdo", > "spring.datasource.url":"jdbc:mysql://10.100.0.3:3306/bootdo_qdkj?useUnicode =true&characterEncoding=utf8", > "spring.datasource.username":"qdkj", > "spring.datasource.password":"AFBD2342ddd%", > "spring.redis.host":"127.0.0.1", > "spring.redis.port":"26379", > "spring.redis.password":"Redis20210224%" > }' -cp .:../lib/*: com.bootdo.BootdoApplication >/dev/null 2>nohup.out & [1] 29474 [root@VM-0-14-centos classes]# tee ./start.sh <<-'EOF' > cd /data/publish/bootdo/WEB-INF/classes/ > cat ./app.pid | xargs -r kill > nohup /data/setupfiles/jdk/jdk1.8.0_161/bin/java -Dspring.application.json='{ > "server.port": 8081, > "spring.profiles.active":"dev", > "bootdo.uploadPath":"/data/files/bootdo", > "spring.datasource.url":"jdbc:mysql://10.100.0.3:3306/bootdo_qdkj?useUnicode =true&characterEncoding =utf8", > "spring.datasource.username":"qdkj", > "spring.datasource.password":"AFBD2342ddd%", > "spring.redis.host":"127.0.0.1", > "spring.redis.port":"26379", > "spring.redis.password":"Redis20210224%" > }' -cp .:../lib/*: com.bootdo.BootdoApplication >/dev/null 2>nohup.out & > EOF cd /data/publish/bootdo/WEB-INF/classes/ cat ./app.pid | xargs -r kill nohup /data/setupfiles/jdk/jdk1.8.0_161/bin/java -Dspring.application.json='{ "server.port": 8081, "spring.profiles.active":"dev", "bootdo.uploadPath":"/data/files/bootdo", "spring.datasource.url":"jdbc:mysql://10.100.0.3:3306/bootdo_qdkj?useUnicode=true&characterEncoding=utf8", "spring.datasource.username":"qdkj", "spring.datasource.password":"AFBD2342ddd%", "spring.redis.host":"127.0.0.1", "spring.redis.port":"26379", "spring.redis.password":"Redis20210224%" }' -cp .:../lib/*: com.bootdo.BootdoApplication >/dev/null 2>nohup.out & [root@VM-0-14-centos classes]# chmod +x /d ata/publish/bootdo/WEB-INF/classes/sta rt.sh [root@VM-0-14-centos classes]# Finished: SUCCESS