0 Replies Latest reply on Nov 23, 2018 1:47 PM by finnschalker

admin console error after security patch CVE-2018-14667

finnschalker Nov 23, 2018 1:47 PM

Hello,

I am getting admin console error after applying redhat's security patch CVE-2018-14667 for SOA Platform 5.3.1 GA which contains an update for richfaces-impl.jar.

20:17:02,116 ERROR [[/admin-console]] Exception sending context initialized event to listener instance of class org.jboss.web.jsf.integration.config.JBossJSFConfigureListener

com.sun.faces.config.ConfigurationException: CONFIGURATION FAILED! null

Any help, idea is welcome. Thanks!

Problem can be reproduced also by starting the default setup with the update richfaces-impl.jar ($JBOSS_HOME/server/$PROFILE/deploy/admin-console.war/WEB-INF/lib/richfaces-impl.jar)

20:17:02,114 WARN [ClassLoaderManager] Unexpected error during load of:org.ajax4jsf.resource.ResourceBuilderImpl

java.lang.SecurityException: class "org.ajax4jsf.resource.ResourceBuilderImpl"'s signer information does not match signer information of other classes in the same package

at java.lang.ClassLoader.checkCerts(ClassLoader.java:955)

at java.lang.ClassLoader.preDefineClass(ClassLoader.java:669)

at java.lang.ClassLoader.defineClass(ClassLoader.java:797)

at org.jboss.classloader.spi.base.BaseClassLoader.access$200(BaseClassLoader.java:48)

at org.jboss.classloader.spi.base.BaseClassLoader$2.run(BaseClassLoader.java:637)

at org.jboss.classloader.spi.base.BaseClassLoader$2.run(BaseClassLoader.java:596)

at java.security.AccessController.doPrivileged(Native Method)

at org.jboss.classloader.spi.base.BaseClassLoader.loadClassLocally(BaseClassLoader.java:595)

at org.jboss.classloader.spi.base.BaseClassLoader.loadClassLocally(BaseClassLoader.java:572)

at org.jboss.classloader.spi.base.BaseDelegateLoader.loadClass(BaseDelegateLoader.java:135)

at org.jboss.classloader.spi.filter.FilteredDelegateLoader.loadClass(FilteredDelegateLoader.java:131)

at org.jboss.classloader.spi.base.ClassLoadingTask$ThreadTask.run(ClassLoadingTask.java:455)

at org.jboss.classloader.spi.base.ClassLoaderManager.nextTask(ClassLoaderManager.java:267)

at org.jboss.classloader.spi.base.ClassLoaderManager.process(ClassLoaderManager.java:166)

at org.jboss.classloader.spi.base.BaseClassLoaderDomain.loadClass(BaseClassLoaderDomain.java:304)

at org.jboss.classloader.spi.base.BaseClassLoaderDomain.loadClass(BaseClassLoaderDomain.java:1261)

at org.jboss.classloader.spi.base.BaseClassLoader.loadClassFromDomain(BaseClassLoader.java:914)

at org.jboss.classloader.spi.base.BaseClassLoader.doLoadClass(BaseClassLoader.java:506)

at org.jboss.classloader.spi.base.BaseClassLoader.loadClass(BaseClassLoader.java:451)

at java.lang.ClassLoader.loadClass(ClassLoader.java:412)

at java.lang.ClassLoader.loadClass(ClassLoader.java:358)

at org.ajax4jsf.resource.InternetResourceBuilder.getInstance(InternetResourceBuilder.java:166)

at org.ajax4jsf.renderkit.ChameleonRenderKitFactory.<init>(ChameleonRenderKitFactory.java:62)

at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)

at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)

at java.lang.reflect.Constructor.newInstance(Constructor.java:526)

at javax.faces.FactoryFinder.getImplGivenPreviousImpl(FactoryFinder.java:519)

at javax.faces.FactoryFinder.getImplementationInstance(FactoryFinder.java:405)

at javax.faces.FactoryFinder.access$400(FactoryFinder.java:135)

at javax.faces.FactoryFinder$FactoryManager.getFactory(FactoryFinder.java:717)

at javax.faces.FactoryFinder.getFactory(FactoryFinder.java:239)

at com.sun.faces.config.processor.FactoryConfigProcessor.verifyFactoriesExist(FactoryConfigProcessor.java:186)

at com.sun.faces.config.processor.FactoryConfigProcessor.process(FactoryConfigProcessor.java:131)

at com.sun.faces.config.ConfigManager.initialize(ConfigManager.java:206)

at com.sun.faces.config.ConfigureListener.contextInitialized(ConfigureListener.java:196)

at org.jboss.web.jsf.integration.config.JBossJSFConfigureListener.contextInitialized(JBossJSFConfigureListener.java:60)

at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3910)

at org.apache.catalina.core.StandardContext.start(StandardContext.java:4389)

at org.jboss.web.tomcat.service.deployers.TomcatDeployment.performDeployInternal(TomcatDeployment.java:313)

at org.jboss.web.tomcat.service.deployers.TomcatDeployment.performDeploy(TomcatDeployment.java:145)

at org.jboss.web.deployers.AbstractWarDeployment.start(AbstractWarDeployment.java:461)

at org.jboss.web.deployers.WebModule.startModule(WebModule.java:122)

at org.jboss.web.deployers.WebModule.start(WebModule.java:97)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:606)

at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:157)

at org.jboss.mx.server.Invocation.dispatch(Invocation.java:96)

at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)

at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)

at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:668)

at org.jboss.system.microcontainer.ServiceProxy.invoke(ServiceProxy.java:206)

at com.sun.proxy.$Proxy39.start(Unknown Source)

at org.jboss.system.microcontainer.StartStopLifecycleAction.installAction(StartStopLifecycleAction.java:42)

at org.jboss.system.microcontainer.StartStopLifecycleAction.installAction(StartStopLifecycleAction.java:37)

at org.jboss.dependency.plugins.action.SimpleControllerContextAction.simpleInstallAction(SimpleControllerContextAction.java:62)

at org.jboss.dependency.plugins.action.AccessControllerContextAction.install(AccessControllerContextAction.java:71)

at org.jboss.dependency.plugins.AbstractControllerContextActions.install(AbstractControllerContextActions.java:51)

at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

at org.jboss.system.microcontainer.ServiceControllerContext.install(ServiceControllerContext.java:297)

at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:826)

at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:556)

at org.jboss.system.ServiceController.doChange(ServiceController.java:688)

at org.jboss.system.ServiceController.start(ServiceController.java:460)

at org.jboss.system.deployers.ServiceDeployer.start(ServiceDeployer.java:163)

at org.jboss.system.deployers.ServiceDeployer.deploy(ServiceDeployer.java:99)

at org.jboss.system.deployers.ServiceDeployer.deploy(ServiceDeployer.java:46)

at org.jboss.deployers.spi.deployer.helpers.AbstractSimpleRealDeployer.internalDeploy(AbstractSimpleRealDeployer.java:62)

at org.jboss.deployers.spi.deployer.helpers.AbstractRealDeployer.deploy(AbstractRealDeployer.java:55)

at org.jboss.deployers.plugins.deployers.DeployerWrapper.deploy(DeployerWrapper.java:179)

at org.jboss.deployers.plugins.deployers.DeployersImpl.doDeploy(DeployersImpl.java:1454)

at org.jboss.deployers.plugins.deployers.DeployersImpl.doInstallParentFirst(DeployersImpl.java:1172)

at org.jboss.deployers.plugins.deployers.DeployersImpl.doInstallParentFirst(DeployersImpl.java:1193)

at org.jboss.deployers.plugins.deployers.DeployersImpl.install(DeployersImpl.java:1113)

at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:826)

at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:556)

at org.jboss.deployers.plugins.deployers.DeployersImpl.process(DeployersImpl.java:789)

at org.jboss.deployers.plugins.main.MainDeployerImpl.process(MainDeployerImpl.java:699)

at org.jboss.system.server.profileservice.repository.MainDeployerAdapter.process(MainDeployerAdapter.java:117)

at org.jboss.system.server.profileservice.repository.ProfileDeployAction.install(ProfileDeployAction.java:70)

at org.jboss.system.server.profileservice.repository.AbstractProfileAction.install(AbstractProfileAction.java:53)

at org.jboss.system.server.profileservice.repository.AbstractProfileService.install(AbstractProfileService.java:403)

at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:778)

at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:543)

at org.jboss.system.server.profileservice.repository.AbstractProfileService.registerProfile(AbstractProfileService.java:308)

at org.jboss.system.server.profileservice.ProfileServiceBootstrap.start(ProfileServiceBootstrap.java:256)

at org.jboss.bootstrap.AbstractServerImpl.start(AbstractServerImpl.java:461)

at org.jboss.Main.boot(Main.java:229)

at org.jboss.Main$1.call(Main.java:561)

at org.jboss.Main$1.call(Main.java:557)

at java.util.concurrent.FutureTask.run(FutureTask.java:262)

at java.lang.Thread.run(Thread.java:745)

20:17:02,116 ERROR [[/admin-console]] Exception sending context initialized event to listener instance of class org.jboss.web.jsf.integration.config.JBossJSFConfigureListener

com.sun.faces.config.ConfigurationException: CONFIGURATION FAILED! null

at com.sun.faces.config.ConfigManager.initialize(ConfigManager.java:216)