Jackson 最新反序列化漏洞 需要升级为jackson-databind-2.9.9.3
fastjson 升级为1.2.62最新版本
1，备份
cd /zywa/spark/spark-2.1.1-bin-hadoop2.7/jars
mv jackson-annotations-2.6.5.jar jackson-annotations-2.6.5.jar.bak
mv jackson-core-2.6.5.jar jackson-core-2.6.5.jar.bak
mv jackson-databind-2.6.5.jar jackson-databind-2.6.5.jar.bak
mv jackson-module-paranamer-2.6.5.jar jackson-module-paranamer-2.6.5.jar.bak
mv jackson-module-scala_2.11-2.6.5.jar jackson-module-scala_2.11-2.6.5.jar.bak
2，替换为以下的包：