fastjson漏洞整改
#7800
Replies: 1 comment 3 replies
-
|
你可以自己升级 到 1.2.83 这个没漏洞的版本 |
Beta Was this translation helpful? Give feedback.
3 replies
-
|
是直接将rocketmq安装目录下lib目录的fastjson的jar包替换成1.2.83的，然后重启broker和namesrv就行了吗 |
Beta Was this translation helpful? Give feedback.
-
|
你如果是直接把开源的包拿去部署，不是自己编译，是可以这么做的，吧lib替换一下就可以。线下环境验证下就行。 |
Beta Was this translation helpful? Give feedback.
-
|
好的，谢谢 |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
rocektmq集群使用二进制包v4.9.6版本部署的，先漏洞扫描出fastjson组件包1.2.69存在高危漏洞，现在要修复这个，是只能将rocketmq版本升级到5.X版本吗
Beta Was this translation helpful? Give feedback.
All reactions