OpenJDK8 u302 jar verification changes due to CVE-2021-2369
Issue
- After upgrading the Red Hat build of OpenJDK from 1.8.0.292.b10 to 1.8.0.302.b08, tomcat fails to start with the following error:
SEVERE [localhost-startStop-1] org.apache.catalina.core.StandardContext.listenerStart Exception sending context initialized event to listener instance of class [org.springframework.web.util.Log4jConfigListener]
java.lang.ExceptionInInitializerError
at org.springframework.web.util.Log4jWebConfigurer.initLogging(Log4jWebConfigurer.java:117)
at org.springframework.web.util.Log4jConfigListener.contextInitialized(Log4jConfigListener.java:46)
at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4689)
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5155)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1412)
at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1402)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.NullPointerException
at java.util.Hashtable.contains(Hashtable.java:294)
at java.util.Hashtable.containsValue(Hashtable.java:321)
at sun.security.util.ManifestEntryVerifier.getParams(ManifestEntryVerifier.java:275)
at sun.security.util.ManifestEntryVerifier.verify(ManifestEntryVerifier.java:209)
at java.util.jar.JarVerifier.processEntry(JarVerifier.java:247)
at java.util.jar.JarVerifier.update(JarVerifier.java:234)
at java.util.jar.JarVerifier$VerifierStream.read(JarVerifier.java:489)
at org.apache.catalina.webresources.AbstractArchiveResource$JarInputStreamWrapper.read(AbstractArchiveResource.java:268)
at org.apache.catalina.webresources.AbstractArchiveResource.getContent(AbstractArchiveResource.java:189)
at org.apache.catalina.loader.WebappClassLoaderBase.findClassInternal(WebappClassLoaderBase.java:2332)
at org.apache.catalina.loader.WebappClassLoaderBase.findClass(WebappClassLoaderBase.java:855)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1327)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1180)
at org.springframework.web.util.WebUtils.<clinit>(WebUtils.java:137)
... 11 more
Environment
- Red Hat build of OpenJDK 8 u302
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.