fastjson漏洞整改
#7800
Replies: 1 comment 3 replies
-
|
你可以自己升级 到 1.2.83 这个没漏洞的版本 |
Beta Was this translation helpful? Give feedback.
3 replies
-
|
是直接将rocketmq安装目录下lib目录的fastjson的jar包替换成1.2.83的，然后重启broker和namesrv就行了吗 |
Beta Was this translation helpful? Give feedback.
-
|
你如果是直接把开源的包拿去部署，不是自己编译，是可以这么做的，吧lib替换一下就可以。线下环境验证下就行。 |
Beta Was this translation helpful? Give feedback.
-
|
好的，谢谢 |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
rocektmq集群使用二进制包v4.9.6版本部署的，先漏洞扫描出fastjson组件包1.2.69存在高危漏洞，现在要修复这个，是只能将rocketmq版本升级到5.X版本吗
Beta Was this translation helpful? Give feedback.
All reactions