0 Replies Latest reply on Nov 23, 2018 1:47 PM by Finn Schalker

    admin console error after security patch CVE-2018-14667

    Finn Schalker Newbie

      Hello,

       

      I am getting admin console error after applying redhat's security patch CVE-2018-14667 for SOA Platform 5.3.1 GA which contains an update for richfaces-impl.jar.

       

      20:17:02,116 ERROR [[/admin-console]] Exception sending context initialized event to listener instance of class org.jboss.web.jsf.integration.config.JBossJSFConfigureListener

      com.sun.faces.config.ConfigurationException: CONFIGURATION FAILED! null

       

      Any help, idea is welcome. Thanks!

      Problem can be reproduced also by starting the default setup with the update richfaces-impl.jar ($JBOSS_HOME/server/$PROFILE/deploy/admin-console.war/WEB-INF/lib/richfaces-impl.jar)

       

      20:17:02,114 WARN  [ClassLoaderManager] Unexpected error during load of:org.ajax4jsf.resource.ResourceBuilderImpl

      java.lang.SecurityException: class "org.ajax4jsf.resource.ResourceBuilderImpl"'s signer information does not match signer information of other classes in the same package

              at java.lang.ClassLoader.checkCerts(ClassLoader.java:955)

              at java.lang.ClassLoader.preDefineClass(ClassLoader.java:669)

              at java.lang.ClassLoader.defineClass(ClassLoader.java:797)

              at org.jboss.classloader.spi.base.BaseClassLoader.access$200(BaseClassLoader.java:48)

              at org.jboss.classloader.spi.base.BaseClassLoader$2.run(BaseClassLoader.java:637)

              at org.jboss.classloader.spi.base.BaseClassLoader$2.run(BaseClassLoader.java:596)

              at java.security.AccessController.doPrivileged(Native Method)

              at org.jboss.classloader.spi.base.BaseClassLoader.loadClassLocally(BaseClassLoader.java:595)

              at org.jboss.classloader.spi.base.BaseClassLoader.loadClassLocally(BaseClassLoader.java:572)

              at org.jboss.classloader.spi.base.BaseDelegateLoader.loadClass(BaseDelegateLoader.java:135)

              at org.jboss.classloader.spi.filter.FilteredDelegateLoader.loadClass(FilteredDelegateLoader.java:131)

              at org.jboss.classloader.spi.base.ClassLoadingTask$ThreadTask.run(ClassLoadingTask.java:455)

              at org.jboss.classloader.spi.base.ClassLoaderManager.nextTask(ClassLoaderManager.java:267)

              at org.jboss.classloader.spi.base.ClassLoaderManager.process(ClassLoaderManager.java:166)

              at org.jboss.classloader.spi.base.BaseClassLoaderDomain.loadClass(BaseClassLoaderDomain.java:304)

              at org.jboss.classloader.spi.base.BaseClassLoaderDomain.loadClass(BaseClassLoaderDomain.java:1261)

              at org.jboss.classloader.spi.base.BaseClassLoader.loadClassFromDomain(BaseClassLoader.java:914)

              at org.jboss.classloader.spi.base.BaseClassLoader.doLoadClass(BaseClassLoader.java:506)

              at org.jboss.classloader.spi.base.BaseClassLoader.loadClass(BaseClassLoader.java:451)

              at java.lang.ClassLoader.loadClass(ClassLoader.java:412)

              at java.lang.ClassLoader.loadClass(ClassLoader.java:358)

              at org.ajax4jsf.resource.InternetResourceBuilder.getInstance(InternetResourceBuilder.java:166)

              at org.ajax4jsf.renderkit.ChameleonRenderKitFactory.<init>(ChameleonRenderKitFactory.java:62)

              at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

              at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)

              at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)

              at java.lang.reflect.Constructor.newInstance(Constructor.java:526)

              at javax.faces.FactoryFinder.getImplGivenPreviousImpl(FactoryFinder.java:519)

              at javax.faces.FactoryFinder.getImplementationInstance(FactoryFinder.java:405)

              at javax.faces.FactoryFinder.access$400(FactoryFinder.java:135)

              at javax.faces.FactoryFinder$FactoryManager.getFactory(FactoryFinder.java:717)

              at javax.faces.FactoryFinder.getFactory(FactoryFinder.java:239)

              at com.sun.faces.config.processor.FactoryConfigProcessor.verifyFactoriesExist(FactoryConfigProcessor.java:186)

              at com.sun.faces.config.processor.FactoryConfigProcessor.process(FactoryConfigProcessor.java:131)

              at com.sun.faces.config.ConfigManager.initialize(ConfigManager.java:206)

              at com.sun.faces.config.ConfigureListener.contextInitialized(ConfigureListener.java:196)

              at org.jboss.web.jsf.integration.config.JBossJSFConfigureListener.contextInitialized(JBossJSFConfigureListener.java:60)

              at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3910)

              at org.apache.catalina.core.StandardContext.start(StandardContext.java:4389)

              at org.jboss.web.tomcat.service.deployers.TomcatDeployment.performDeployInternal(TomcatDeployment.java:313)

              at org.jboss.web.tomcat.service.deployers.TomcatDeployment.performDeploy(TomcatDeployment.java:145)

              at org.jboss.web.deployers.AbstractWarDeployment.start(AbstractWarDeployment.java:461)

              at org.jboss.web.deployers.WebModule.startModule(WebModule.java:122)

              at org.jboss.web.deployers.WebModule.start(WebModule.java:97)

              at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

              at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)

              at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

              at java.lang.reflect.Method.invoke(Method.java:606)

              at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:157)

              at org.jboss.mx.server.Invocation.dispatch(Invocation.java:96)

              at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)

              at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)

              at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:668)

              at org.jboss.system.microcontainer.ServiceProxy.invoke(ServiceProxy.java:206)

              at com.sun.proxy.$Proxy39.start(Unknown Source)

              at org.jboss.system.microcontainer.StartStopLifecycleAction.installAction(StartStopLifecycleAction.java:42)

              at org.jboss.system.microcontainer.StartStopLifecycleAction.installAction(StartStopLifecycleAction.java:37)

              at org.jboss.dependency.plugins.action.SimpleControllerContextAction.simpleInstallAction(SimpleControllerContextAction.java:62)

              at org.jboss.dependency.plugins.action.AccessControllerContextAction.install(AccessControllerContextAction.java:71)

              at org.jboss.dependency.plugins.AbstractControllerContextActions.install(AbstractControllerContextActions.java:51)

              at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

              at org.jboss.system.microcontainer.ServiceControllerContext.install(ServiceControllerContext.java:297)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

              at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

              at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:826)

              at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:556)

              at org.jboss.system.ServiceController.doChange(ServiceController.java:688)

              at org.jboss.system.ServiceController.start(ServiceController.java:460)

              at org.jboss.system.deployers.ServiceDeployer.start(ServiceDeployer.java:163)

              at org.jboss.system.deployers.ServiceDeployer.deploy(ServiceDeployer.java:99)

              at org.jboss.system.deployers.ServiceDeployer.deploy(ServiceDeployer.java:46)

              at org.jboss.deployers.spi.deployer.helpers.AbstractSimpleRealDeployer.internalDeploy(AbstractSimpleRealDeployer.java:62)

              at org.jboss.deployers.spi.deployer.helpers.AbstractRealDeployer.deploy(AbstractRealDeployer.java:55)

              at org.jboss.deployers.plugins.deployers.DeployerWrapper.deploy(DeployerWrapper.java:179)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.doDeploy(DeployersImpl.java:1454)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.doInstallParentFirst(DeployersImpl.java:1172)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.doInstallParentFirst(DeployersImpl.java:1193)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.install(DeployersImpl.java:1113)

              at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

              at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

              at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:826)

              at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:556)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.process(DeployersImpl.java:789)

              at org.jboss.deployers.plugins.main.MainDeployerImpl.process(MainDeployerImpl.java:699)

              at org.jboss.system.server.profileservice.repository.MainDeployerAdapter.process(MainDeployerAdapter.java:117)

              at org.jboss.system.server.profileservice.repository.ProfileDeployAction.install(ProfileDeployAction.java:70)

              at org.jboss.system.server.profileservice.repository.AbstractProfileAction.install(AbstractProfileAction.java:53)

              at org.jboss.system.server.profileservice.repository.AbstractProfileService.install(AbstractProfileService.java:403)

              at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

              at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:778)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:543)

              at org.jboss.system.server.profileservice.repository.AbstractProfileService.registerProfile(AbstractProfileService.java:308)

              at org.jboss.system.server.profileservice.ProfileServiceBootstrap.start(ProfileServiceBootstrap.java:256)

              at org.jboss.bootstrap.AbstractServerImpl.start(AbstractServerImpl.java:461)

              at org.jboss.Main.boot(Main.java:229)

              at org.jboss.Main$1.call(Main.java:561)

              at org.jboss.Main$1.call(Main.java:557)

              at java.util.concurrent.FutureTask.run(FutureTask.java:262)

              at java.lang.Thread.run(Thread.java:745)

      20:17:02,116 ERROR [[/admin-console]] Exception sending context initialized event to listener instance of class org.jboss.web.jsf.integration.config.JBossJSFConfigureListener

      com.sun.faces.config.ConfigurationException: CONFIGURATION FAILED! null

              at com.sun.faces.config.ConfigManager.initialize(ConfigManager.java:216)

              at com.sun.faces.config.ConfigureListener.contextInitialized(ConfigureListener.java:196)

              at org.jboss.web.jsf.integration.config.JBossJSFConfigureListener.contextInitialized(JBossJSFConfigureListener.java:60)

              at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3910)

              at org.apache.catalina.core.StandardContext.start(StandardContext.java:4389)

              at org.jboss.web.tomcat.service.deployers.TomcatDeployment.performDeployInternal(TomcatDeployment.java:313)

              at org.jboss.web.tomcat.service.deployers.TomcatDeployment.performDeploy(TomcatDeployment.java:145)

              at org.jboss.web.deployers.AbstractWarDeployment.start(AbstractWarDeployment.java:461)

              at org.jboss.web.deployers.WebModule.startModule(WebModule.java:122)

              at org.jboss.web.deployers.WebModule.start(WebModule.java:97)

              at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

              at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)

              at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

              at java.lang.reflect.Method.invoke(Method.java:606)

              at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:157)

              at org.jboss.mx.server.Invocation.dispatch(Invocation.java:96)

              at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)

              at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)

              at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:668)

              at org.jboss.system.microcontainer.ServiceProxy.invoke(ServiceProxy.java:206)

              at com.sun.proxy.$Proxy39.start(Unknown Source)

              at org.jboss.system.microcontainer.StartStopLifecycleAction.installAction(StartStopLifecycleAction.java:42)

              at org.jboss.system.microcontainer.StartStopLifecycleAction.installAction(StartStopLifecycleAction.java:37)

              at org.jboss.dependency.plugins.action.SimpleControllerContextAction.simpleInstallAction(SimpleControllerContextAction.java:62)

              at org.jboss.dependency.plugins.action.AccessControllerContextAction.install(AccessControllerContextAction.java:71)

              at org.jboss.dependency.plugins.AbstractControllerContextActions.install(AbstractControllerContextActions.java:51)

              at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

              at org.jboss.system.microcontainer.ServiceControllerContext.install(ServiceControllerContext.java:297)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

              at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

              at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:826)

              at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:556)

              at org.jboss.system.ServiceController.doChange(ServiceController.java:688)

              at org.jboss.system.ServiceController.start(ServiceController.java:460)

              at org.jboss.system.deployers.ServiceDeployer.start(ServiceDeployer.java:163)

              at org.jboss.system.deployers.ServiceDeployer.deploy(ServiceDeployer.java:99)

              at org.jboss.system.deployers.ServiceDeployer.deploy(ServiceDeployer.java:46)

              at org.jboss.deployers.spi.deployer.helpers.AbstractSimpleRealDeployer.internalDeploy(AbstractSimpleRealDeployer.java:62)

              at org.jboss.deployers.spi.deployer.helpers.AbstractRealDeployer.deploy(AbstractRealDeployer.java:55)

              at org.jboss.deployers.plugins.deployers.DeployerWrapper.deploy(DeployerWrapper.java:179)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.doDeploy(DeployersImpl.java:1454)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.doInstallParentFirst(DeployersImpl.java:1172)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.doInstallParentFirst(DeployersImpl.java:1193)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.install(DeployersImpl.java:1113)

              at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

              at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

              at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:826)

              at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:556)

              at org.jboss.deployers.plugins.deployers.DeployersImpl.process(DeployersImpl.java:789)

              at org.jboss.deployers.plugins.main.MainDeployerImpl.process(MainDeployerImpl.java:699)

              at org.jboss.system.server.profileservice.repository.MainDeployerAdapter.process(MainDeployerAdapter.java:117)

              at org.jboss.system.server.profileservice.repository.ProfileDeployAction.install(ProfileDeployAction.java:70)

              at org.jboss.system.server.profileservice.repository.AbstractProfileAction.install(AbstractProfileAction.java:53)

              at org.jboss.system.server.profileservice.repository.AbstractProfileService.install(AbstractProfileService.java:403)

              at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1652)

              at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:938)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1082)

              at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:988)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:778)

              at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:543)

              at org.jboss.system.server.profileservice.repository.AbstractProfileService.registerProfile(AbstractProfileService.java:308)

              at org.jboss.system.server.profileservice.ProfileServiceBootstrap.start(ProfileServiceBootstrap.java:256)

              at org.jboss.bootstrap.AbstractServerImpl.start(AbstractServerImpl.java:461)

              at org.jboss.Main.boot(Main.java:229)

              at org.jboss.Main$1.call(Main.java:561)

              at org.jboss.Main$1.call(Main.java:557)

              at java.util.concurrent.FutureTask.run(FutureTask.java:262)

              at java.lang.Thread.run(Thread.java:745)

      Caused by: java.lang.NullPointerException

              at org.ajax4jsf.renderkit.ChameleonRenderKitFactory.<init>(ChameleonRenderKitFactory.java:62)

              at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

              at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)

              at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)

              at java.lang.reflect.Constructor.newInstance(Constructor.java:526)

              at javax.faces.FactoryFinder.getImplGivenPreviousImpl(FactoryFinder.java:519)

              at javax.faces.FactoryFinder.getImplementationInstance(FactoryFinder.java:405)

              at javax.faces.FactoryFinder.access$400(FactoryFinder.java:135)

              at javax.faces.FactoryFinder$FactoryManager.getFactory(FactoryFinder.java:717)

              at javax.faces.FactoryFinder.getFactory(FactoryFinder.java:239)

              at com.sun.faces.config.processor.FactoryConfigProcessor.verifyFactoriesExist(FactoryConfigProcessor.java:186)

              at com.sun.faces.config.processor.FactoryConfigProcessor.process(FactoryConfigProcessor.java:131)

              at com.sun.faces.config.ConfigManager.initialize(ConfigManager.java:206)

              ... 73 more