Help Center/ MapReduce Service/ Product Bulletin/ Vulnerability Notice/ MRS Fastjson Vulnerability Remediation Guide/ Remediating Flink
Updated on 2024-08-28 GMT+08:00
View PDF
Share

Remediating Flink

Prerequisites

You have obtained the URL and admin account for logging in to FusionInsight Manager.

Procedure

  1. Log in to FusionInsight Manager and choose Cluster > Services > Flink. Click Configurations then All Configurations. On this sub-tab page, search for the FLINK_SERVER_GC_OPTS parameter, and add -Dfastjson.parser.safeMode=true to the Value column of FLINK_SERVER_GC_OPTS. (Leave a space between the existing value and -Dfastjson.parser.safeMode=true.)

    For example, if the existing value is xxx, the new value is xxx -Dfastjson.parser.safeMode=true.

  2. Click Save. On the Instance tab page, select all FlinkServer instances and choose More > Restart Instance.

  1. Log in to any FlinkServer node as user omm and check the process:

    ps -ef | grep FlinkServer

    If the -Dfastjson.parser.safeMode=true parameter exists, the vulnerability has been mitigated.