spark2.1检测出jackson漏洞,升级版本
Jackson 最新反序列化漏洞 需要升级为jackson-databind-2.9.9.3
fastjson 升级为1.2.62最新版本
1,备份
cd /zywa/spark/spark-2.1.1-bin-hadoop2.7/jars
mv jackson-annotations-2.6.5.jar jackson-annotations-2.6.5.jar.bak
mv jackson-core-2.6.5.jar jackson-core-2.6.5.jar.bak
mv jackson-databind-2.6.5.jar jackson-databind-2.6.5.jar.bak
mv jackson-module-paranamer-2.6.5.jar jackson-module-paranamer-2.6.5.jar.bak
mv jackson-module-scala_2.11-2.6.5.jar jackson-module-scala_2.11-2.6.5.jar.bak
2,替换为以下的包: