You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Lentes, Bernd" <be...@helmholtz-muenchen.de> on 2016/06/22 11:52:13 UTC

error during startup after applying changes from CVE-2016-3092

Hi,

i changed maxHttpHeaderSize in server.xml following the recommendation in CVE-2016-3092.
I changed it to 2048 bytes.

<Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" maxHttpHeaderSize="2048" />
    <!-- A "Connector" using the shared thread pool-->
    <!--
    <Connector executor="tomcatThreadPool"
               port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" maxHttpHeaderSize="2048" />


After restart of the server i got several errors in catalina.log:

Jun 22, 2016 1:38:01 PM org.apache.catalina.loader.WebappClassLoader clearReferencesJdbc
SEVERE: The web application [/MouseIDGenes] registered the JDBC driver [org.postgresql.Driver] but failed to unregister it when the web application was stopped. To prevent a memory leak, the JDBC Driver has been forcibly unregistered.
Jun 22, 2016 1:38:01 PM org.apache.coyote.http11.Http11Protocol destroy

...

Jun 22, 2016 1:38:07 PM org.apache.catalina.loader.WebappLoader start
SEVERE: LifecycleException
java.io.IOException: Failed to access resource /WEB-INF/lib/[taglibs-core].jar
        at org.apache.catalina.loader.WebappLoader.setRepositories(WebappLoader.java:1052)
        at org.apache.catalina.loader.WebappLoader.start(WebappLoader.java:683)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4609)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:803)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:780)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
        at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1080)
        at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1003)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:325)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463)
        at org.apache.catalina.core.StandardService.start(StandardService.java:525)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:759)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:95)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:56)
        at java.lang.reflect.Method.invoke(Method.java:620)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
Caused by: javax.naming.NamingException: Resource [taglibs-core].jar not found
        at org.apache.naming.resources.FileDirContext.lookup(FileDirContext.java:209)
        at org.apache.catalina.loader.WebappLoader.setRepositories(WebappLoader.java:1050)
        ... 24 more

...

Jun 22, 2016 1:38:07 PM org.apache.catalina.core.ContainerBase addChildInternal
SEVERE: ContainerBase.addChild: start:
LifecycleException:  start: :  java.io.IOException: Failed to access resource /WEB-INF/lib/[taglibs-core].jar
        at org.apache.catalina.loader.WebappLoader.start(WebappLoader.java:709)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4609)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:803)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:780)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
        at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1080)
        at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1003)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:325)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463)
        at org.apache.catalina.core.StandardService.start(StandardService.java:525)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:759)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:95)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:56)
        at java.lang.reflect.Method.invoke(Method.java:620)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)

...

Jun 22, 2016 1:38:07 PM org.apache.catalina.startup.HostConfig deployDirectory
SEVERE: Error deploying web application directory examples
java.lang.IllegalStateException: ContainerBase.addChild: start: LifecycleException:  start: :  java.io.IOException: Failed to access resource /WEB-INF/lib/[taglibs-core].jar
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:807)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:780)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
        at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1080)
        at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1003)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:325)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463)
        at org.apache.catalina.core.StandardService.start(StandardService.java:525)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:759)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:95)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:56)
        at java.lang.reflect.Method.invoke(Method.java:620)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)

I'm pretty new to tomcat. Does anybody have an idea ?
It's tomcat6-6.0.45-0.50.1 on a SLES 11 SP4 64bit.

Thanks.


Bernd



-- 
Bernd Lentes 

Systemadministration 
institute of developmental genetics 
Gebäude 35.34 - Raum 208 
HelmholtzZentrum München 
bernd.lentes@helmholtz-muenchen.de 
phone: +49 (0)89 3187 1241 
fax: +49 (0)89 3187 2294 

Wer glaubt das Projektleiter Projekte leiten 
der glaubt auch das Zitronenfalter 
Zitronen falten
 

Helmholtz Zentrum Muenchen
Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH)
Ingolstaedter Landstr. 1
85764 Neuherberg
www.helmholtz-muenchen.de
Aufsichtsratsvorsitzende: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrer: Prof. Dr. Guenther Wess, Dr. Alfons Enhsen, Renate Schlusen (komm.)
Registergericht: Amtsgericht Muenchen HRB 6466
USt-IdNr: DE 129521671


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: error during startup after applying changes from CVE-2016-3092

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Bernd,

On 6/22/16 8:05 AM, Lentes, Bernd wrote:
> 
> 
> ----- On Jun 22, 2016, at 1:52 PM, Bernd Lentes
> bernd.lentes@helmholtz-muenchen.de wrote:
> 
>> Hi,
>> 
>> i changed maxHttpHeaderSize in server.xml following the
>> recommendation in CVE-2016-3092. I changed it to 2048 bytes.
>> 
>> <Connector port="8080" protocol="HTTP/1.1" 
>> connectionTimeout="20000" redirectPort="8443"
>> maxHttpHeaderSize="2048" /> <!-- A "Connector" using the shared
>> thread pool--> <!-- <Connector executor="tomcatThreadPool" 
>> port="8080" protocol="HTTP/1.1" connectionTimeout="20000" 
>> redirectPort="8443" maxHttpHeaderSize="2048" />
>> 
>> 
>> After restart of the server i got several errors in
>> catalina.log:
>> 
>> Jun 22, 2016 1:38:01 PM
>> org.apache.catalina.loader.WebappClassLoader clearReferencesJdbc 
>> SEVERE: The web application [/MouseIDGenes] registered the JDBC
>> driver [org.postgresql.Driver] but failed to unregister it when
>> the web application was stopped. To prevent a memory leak, the
>> JDBC Driver has been forcibly unregistered. Jun 22, 2016 1:38:01
>> PM org.apache.coyote.http11.Http11Protocol destroy
>> 
>> ...
>> 
>> Jun 22, 2016 1:38:07 PM org.apache.catalina.loader.WebappLoader
>> start SEVERE: LifecycleException java.io.IOException: Failed to
>> access resource /WEB-INF/lib/[taglibs-core].jar at 
>> org.apache.catalina.loader.WebappLoader.setRepositories(WebappLoader.
java:1052)
>>
>> 
at org.apache.catalina.loader.WebappLoader.start(WebappLoader.java:683)
>> at
>> org.apache.catalina.core.StandardContext.start(StandardContext.java:4
609)
>>
>> 
at
>> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:803)
>>
>> 
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:78
0)
>> at
>> org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
>>
>> 
at
org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1
080)
>> at 
>> org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.j
ava:1003)
>>
>> 
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507
)
>> at
>> org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
>>
>> 
at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:32
5)
>> at 
>> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:142)
>>
>> 
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
>> at
>> org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
>>
>> 
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
>> at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463
)
>>
>> 
at org.apache.catalina.core.StandardService.start(StandardService.java:5
25)
>> at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:759
)
>>
>> 
at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:95)
>>
>> 
at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:56)
>>
>> 
at java.lang.reflect.Method.invoke(Method.java:620)
>> at
>> org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289) 
>> at
>> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414) 
>> Caused by: javax.naming.NamingException: Resource
>> [taglibs-core].jar not found at
>> org.apache.naming.resources.FileDirContext.lookup(FileDirContext.java
:209)
>>
>> 
at
>> org.apache.catalina.loader.WebappLoader.setRepositories(WebappLoader.
java:1050)
>>
>> 
... 24 more
>> 
>> ...
>> 
>> Jun 22, 2016 1:38:07 PM org.apache.catalina.core.ContainerBase
>> addChildInternal SEVERE: ContainerBase.addChild: start: 
>> LifecycleException:  start: :  java.io.IOException: Failed to
>> access resource /WEB-INF/lib/[taglibs-core].jar at
>> org.apache.catalina.loader.WebappLoader.start(WebappLoader.java:709)
>>
>> 
at org.apache.catalina.core.StandardContext.start(StandardContext.java:4
609)
>> at 
>> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:803)
>>
>> 
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:78
0)
>> at
>> org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
>>
>> 
at
org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1
080)
>> at 
>> org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.j
ava:1003)
>>
>> 
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507
)
>> at
>> org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
>>
>> 
at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:32
5)
>> at 
>> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:142)
>>
>> 
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
>> at
>> org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
>>
>> 
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
>> at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463
)
>>
>> 
at org.apache.catalina.core.StandardService.start(StandardService.java:5
25)
>> at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:759
)
>>
>> 
at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:95)
>>
>> 
at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:56)
>>
>> 
at java.lang.reflect.Method.invoke(Method.java:620)
>> at
>> org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289) 
>> at
>> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
>> 
>> ...
>> 
>> Jun 22, 2016 1:38:07 PM org.apache.catalina.startup.HostConfig
>> deployDirectory SEVERE: Error deploying web application directory
>> examples java.lang.IllegalStateException: ContainerBase.addChild:
>> start: LifecycleException:  start: :  java.io.IOException: Failed
>> to access resource /WEB-INF/lib/[taglibs-core].jar at 
>> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:807)
>>
>> 
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:78
0)
>> at
>> org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
>>
>> 
at
org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1
080)
>> at 
>> org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.j
ava:1003)
>>
>> 
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507
)
>> at
>> org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
>>
>> 
at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:32
5)
>> at 
>> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:142)
>>
>> 
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
>> at
>> org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
>>
>> 
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
>> at
>> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463
)
>>
>> 
at org.apache.catalina.core.StandardService.start(StandardService.java:5
25)
>> at
>> org.apache.catalina.core.StandardServer.start(StandardServer.java:759
)
>>
>> 
at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:95)
>>
>> 
at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:56)
>>
>> 
at java.lang.reflect.Method.invoke(Method.java:620)
>> at
>> org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289) 
>> at
>> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
>> 
>> I'm pretty new to tomcat. Does anybody have an idea ? It's
>> tomcat6-6.0.45-0.50.1 on a SLES 11 SP4 64bit.
>> 
>> Thanks.
>> 
>> 
>> Bernd
> Hi,
> 
> i read "[SECURITY][CORRECTION] CVE-2016-3092 Apache Tomcat Denial
> of Service" and recognized that Tomcat 6.x is not affected. I undid
> the changes, restarted the server but got the same errors.

Your changes have nothing to do with the error you are seeing. Tomcat
can't loca your JAR file for some reason. Why does it say
"[taglibs-core].jar" (in brackets) like that?

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=6X/E
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: error during startup after applying changes from CVE-2016-3092

Posted by "Lentes, Bernd" <be...@helmholtz-muenchen.de>.

----- On Jun 22, 2016, at 1:52 PM, Bernd Lentes bernd.lentes@helmholtz-muenchen.de wrote:

> Hi,
> 
> i changed maxHttpHeaderSize in server.xml following the recommendation in
> CVE-2016-3092.
> I changed it to 2048 bytes.
> 
> <Connector port="8080" protocol="HTTP/1.1"
>               connectionTimeout="20000"
>               redirectPort="8443" maxHttpHeaderSize="2048" />
>    <!-- A "Connector" using the shared thread pool-->
>    <!--
>    <Connector executor="tomcatThreadPool"
>               port="8080" protocol="HTTP/1.1"
>               connectionTimeout="20000"
>               redirectPort="8443" maxHttpHeaderSize="2048" />
> 
> 
> After restart of the server i got several errors in catalina.log:
> 
> Jun 22, 2016 1:38:01 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesJdbc
> SEVERE: The web application [/MouseIDGenes] registered the JDBC driver
> [org.postgresql.Driver] but failed to unregister it when the web application
> was stopped. To prevent a memory leak, the JDBC Driver has been forcibly
> unregistered.
> Jun 22, 2016 1:38:01 PM org.apache.coyote.http11.Http11Protocol destroy
> 
> ...
> 
> Jun 22, 2016 1:38:07 PM org.apache.catalina.loader.WebappLoader start
> SEVERE: LifecycleException
> java.io.IOException: Failed to access resource /WEB-INF/lib/[taglibs-core].jar
>        at
>        org.apache.catalina.loader.WebappLoader.setRepositories(WebappLoader.java:1052)
>        at org.apache.catalina.loader.WebappLoader.start(WebappLoader.java:683)
>        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4609)
>        at
>        org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:803)
>        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:780)
>        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
>        at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1080)
>        at
>        org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1003)
>        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507)
>        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
>        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:325)
>        at
>        org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
>        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
>        at org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
>        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
>        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463)
>        at org.apache.catalina.core.StandardService.start(StandardService.java:525)
>        at org.apache.catalina.core.StandardServer.start(StandardServer.java:759)
>        at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:95)
>        at
>        sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:56)
>        at java.lang.reflect.Method.invoke(Method.java:620)
>        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
>        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
> Caused by: javax.naming.NamingException: Resource [taglibs-core].jar not found
>        at org.apache.naming.resources.FileDirContext.lookup(FileDirContext.java:209)
>        at
>        org.apache.catalina.loader.WebappLoader.setRepositories(WebappLoader.java:1050)
>        ... 24 more
> 
> ...
> 
> Jun 22, 2016 1:38:07 PM org.apache.catalina.core.ContainerBase addChildInternal
> SEVERE: ContainerBase.addChild: start:
> LifecycleException:  start: :  java.io.IOException: Failed to access resource
> /WEB-INF/lib/[taglibs-core].jar
>        at org.apache.catalina.loader.WebappLoader.start(WebappLoader.java:709)
>        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4609)
>        at
>        org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:803)
>        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:780)
>        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
>        at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1080)
>        at
>        org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1003)
>        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507)
>        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
>        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:325)
>        at
>        org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
>        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
>        at org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
>        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
>        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463)
>        at org.apache.catalina.core.StandardService.start(StandardService.java:525)
>        at org.apache.catalina.core.StandardServer.start(StandardServer.java:759)
>        at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:95)
>        at
>        sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:56)
>        at java.lang.reflect.Method.invoke(Method.java:620)
>        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
>        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
> 
> ...
> 
> Jun 22, 2016 1:38:07 PM org.apache.catalina.startup.HostConfig deployDirectory
> SEVERE: Error deploying web application directory examples
> java.lang.IllegalStateException: ContainerBase.addChild: start:
> LifecycleException:  start: :  java.io.IOException: Failed to access resource
> /WEB-INF/lib/[taglibs-core].jar
>        at
>        org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:807)
>        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:780)
>        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
>        at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1080)
>        at
>        org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1003)
>        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:507)
>        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1322)
>        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:325)
>        at
>        org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
>        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1069)
>        at org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
>        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1061)
>        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463)
>        at org.apache.catalina.core.StandardService.start(StandardService.java:525)
>        at org.apache.catalina.core.StandardServer.start(StandardServer.java:759)
>        at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:95)
>        at
>        sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:56)
>        at java.lang.reflect.Method.invoke(Method.java:620)
>        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
>        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
> 
> I'm pretty new to tomcat. Does anybody have an idea ?
> It's tomcat6-6.0.45-0.50.1 on a SLES 11 SP4 64bit.
> 
> Thanks.
> 
> 
> Bernd
Hi,

i read "[SECURITY][CORRECTION] CVE-2016-3092 Apache Tomcat Denial of Service" and recognized that Tomcat 6.x is not affected.
I undid the changes, restarted the server but got the same errors.


Bernd
 

Helmholtz Zentrum Muenchen
Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH)
Ingolstaedter Landstr. 1
85764 Neuherberg
www.helmholtz-muenchen.de
Aufsichtsratsvorsitzende: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrer: Prof. Dr. Guenther Wess, Dr. Alfons Enhsen, Renate Schlusen (komm.)
Registergericht: Amtsgericht Muenchen HRB 6466
USt-IdNr: DE 129521671


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org