Short Term Resolution
Remediation steps are outlined in the TSB-545 documentation.
Be aware that the following actions are pulling the vulnerable jar back in action again:
Adding service
Scaling up cluster
Enabling features like: LZO, HDFS HA.
Apache Ambari Release Notes
Also available as: