spark2.1检测出jackson漏洞,升级版本

Jackson 最新反序列化漏洞  需要升级为jackson-databind-2.9.9.3
fastjson 升级为1.2.62最新版本

1,备份 

cd /zywa/spark/spark-2.1.1-bin-hadoop2.7/jars
mv jackson-annotations-2.6.5.jar jackson-annotations-2.6.5.jar.bak
mv jackson-core-2.6.5.jar jackson-core-2.6.5.jar.bak
mv jackson-databind-2.6.5.jar jackson-databind-2.6.5.jar.bak
mv jackson-module-paranamer-2.6.5.jar jackson-module-paranamer-2.6.5.jar.bak
mv jackson-module-scala_2.11-2.6.5.jar jackson-module-scala_2.11-2.6.5.jar.bak

 

2,替换为以下的包:

 

spark2.1检测出jackson漏洞,升级版本