Bug 2046158
| Summary: | Rsyslog with GnuTLS net stream driver configured runs into 100% CPU usage when TLS connection is broken. | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Flos Qi Guo <qguo> | |
| Component: | rsyslog | Assignee: | Attila Lakatos <alakatos> | |
| Status: | CLOSED ERRATA | QA Contact: | Dalibor Pospíšil <dapospis> | |
| Severity: | high | Docs Contact: | Mirek Jahoda <mjahoda> | |
| Priority: | urgent | |||
| Version: | 8.5 | CC: | dapospis, orion, rsroka, sarroutb, sbroz, xintli | |
| Target Milestone: | rc | Keywords: | Triaged | |
| Target Release: | --- | Flags: | dapospis:
mirror-
|
|
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | rsyslog-8.2102.0-10.el8 | Doc Type: | Bug Fix | |
| Doc Text: |
The code contained a rare possibility where an infinite loop could be invoked, for example when a TLS handshake is interrupted at a certain stage. As a consequence, rsyslog could easily consume the entire part of the CPU, making the machine slow to react.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 2073448 (view as bug list) | Environment: | ||
| Last Closed: | 2022-11-08 09:17:01 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 2073448 | |||
|
Description
Flos Qi Guo
2022-01-26 10:22:20 UTC
Upstream report: https://github.com/rsyslog/rsyslog/issues/4638 Hello Orion, Seems no much analysis in the issue you shared. I create an new issue and try to discuss with upstream here: https://github.com/rsyslog/rsyslog/issues/4818. Thanks, Flos Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (rsyslog bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:7460 |