On Mon, 31 Mar 2003, Habichtsberg, R. wrote:

I'm not sure if it is the reason but the probability is high:

After the security update of the linux kernel, in my case from k_deflt-2.4.18-57 to k_deflt-2.4.18-261, I have two frozen systems.

In the first case we are running a program that starts some stored procedures in a Informix Database (IDS 9.30.UC1). After a few minutes there are no more actions possible on that server. You can't find any message in /var/log/messages or online.log. Even recursively started commands like ps or onstat -g ses sid -r 1>protfile does not generate any output.

In the second case the similar happened during daily cronjob which builds and loads a database of ca. 8 GB size.

My question: Has anybody else problems with these kernel updates related to Informix Dynamic Server.

No, but after installing my machine hang on mounting a USB-drive. With the old kernel the device never hang on mount, some times copying large files took very long (the machine seams to be hung for a few minutes). So it is likely that the hardware has a problem, BUT the new kernel seams to be more picky about it. -- BINGO: robust product evolution capitalizing pure play synergy --- Engelbert Gruber -------+ SSG Fintl,Gruber,Lassnig / A6410 Telfs Untermarkt 9 / Tel. ++43-5262-64727 ----+

On Mon, Mar 31, 2003 at 10:30:22PM +0200, Tobias Cremer wrote:

Am Montag, 31. März 2003 10:35 schrieb Habichtsberg, R.:

...

Hi, After the security update of the linux kernel, in my case from k_deflt-2.4.18-57 to k_deflt-2.4.18-261, I have two frozen systems.

I had a frozen system after the security kernel patch twice this evening. [...] It really looks like SuSE have to be more careful with building the patches. Of course I know that this is a question of time, but I rather take the workaround and wait longer for a patch than to apply a patch which freezes my system.

I have had a frozen system twice after installing the new kernel in a SuSE 7.3 system (upgrading thus from 2.4.10 to 2.4.18). This never had happened before. But I am glad that this until now did not happen to my webserver (same SuSE 7.3, same patch). (And as I have written in another mail in this list, my Adaptec AVA-1505AE (SCSI controller) does not work any more.) What is the best thing to do now - to go back to the unpatched kernel (and to live with the security problem), to remain with the risk of a freeze or to try the k_deflt-2.4.19-patch? By, Hatto

All, I tried updating the kernel on one of my test SuSE 7.2 servers. After the install and the normal (mk_initrd && lilo) commands, I rebooted the machine. The new kernel loaded and didn't toss any errors, but once it was fully booted, no IP traffic inbound or outbound could leave the machine. Running an ifconfig showed the Interface as being up and active, however a ping, etc. shows no returned data. I rebooted again back to the prior kernel (2.4.16), and it works just fine. Any word on what be causing this? Thanks :-) ============================================ Drew J. Como Phone: 631-434-6600 Systems Administrator Fax: 631-434-7800 dcomo@bascom.com Web: www.bascom.com Bascom Global Internet Services, Inc. -------------------------------------------- "When quality is the goal, winning is guaranteed." -----Original Message----- From: Tobias Cremer [mailto:sec-tobiwan@gmx.net] Sent: Monday, March 31, 2003 6:24 PM To: suse-security@suse.com Subject: Re: [suse-security] Linux-Server is frozen after security update of kernel -----BEGIN PGP SIGNED MESSAGE----- Am Montag, 31. März 2003 23:11 schrieb Hatto von Hatzfeld:

I have had a frozen system twice after installing the new kernel in a SuSE 7.3 system (upgrading thus from 2.4.10 to 2.4.18). This never had happened before. But I am glad that this until now did not happen to my webserver (same SuSE 7.3, same patch).

Now I reinstalled the original kernel - at my desktop I can handle the risk and do a workaround since I'm the only person working on the machine. A system which freezes several times is unfortunately unacceptable to me when I always have to check the file system manually what takes several minutes, because the hard disk is corrupted arfter a reboot. And I thinking to leave a productional server unpatched and do a "echo /dummy > /proc/sys/kernel/modprobe" to avoid being hacked. To the Server I dont have console access and will have to call the guys at the NOC. Or are there any better suggestions?

What is the best thing to do now - to go back to the unpatched kernel (and to live with the security problem), to remain with the risk of a freeze or to try the k_deflt-2.4.19-patch?

=> see above. I'm not lucky with the situation. I've experienced SuSE to be a good, reliable distribution but what happens now is what I wanted to avoid with changing from windows to linux some years ago. Hope that SuSE will provide a patch which is better tested than this one the next time. Regards: Tobias - -- - ------------------------------------- Tobias Cremer Hohenzollernstr. 20 80801 München to.c@gmx.net http://www.tobiwan-kenobi.de -----BEGIN PGP SIGNATURE----- Version: 2.6.3in Charset: noconv iQCVAwUBPojOK7d9JiPf/I1hAQGIwwQAg5wLy/9zhXoZZbG3PhvNNYlar4zcTkLs 4ge9p0mHPuJ8WVXU4hQeKc4DSqQ9Yv4Iy5cJw4/waYslcFT9t4a+E49CcesG6ZLt xVe22+oxPKhmD8UCMi/KtDG/Y8JPDb5TkivKLw4+5evjdHPbKeJVQITPBjO1Abwj dbwpn+dulh8= =aFb9 -----END PGP SIGNATURE----- -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here

-----BEGIN PGP SIGNED MESSAGE----- Am Dienstag, 1. April 2003 21:09 schrieb Arjen Runsink:

This happend on 2 systems. Both P-II's with k_deflt.

What machine types did you all experience the freezes?

It's a AMD Duron 600 MHz, no SCSI. Tobias - -- - ------------------------------------- Tobias Cremer Hohenzollernstr. 20 80801 München to.c@gmx.net http://www.tobiwan-kenobi.de -----BEGIN PGP SIGNATURE----- Version: 2.6.3in Charset: noconv iQCVAwUBPosM9bd9JiPf/I1hAQFJogP/ak3A5Nj0e31VLkn8VCXCK5pRtOAbYgJA k2A71GmDKLWvWfZq+NHhURclDx+SBmaO7gAImoMgIDKrm3N3KrbA0iz5LJ8Ksdq8 Pl+38+LjOOc3zMF6IPFB5rA8wRP9C8WiOSkoaGnYiUsftODxE00TsErNmJDb5TiO +U5HelIdkeY= =qpnK -----END PGP SIGNATURE-----

On Wed, 2 Apr 2003, Eduard Avetisyan wrote:

I'm afraid it's time to ask - on what type of machine and what configuration has SuSE tested the new kernel ;-) Maybe all switch to exactly that type of hardware in the future?

It's also fair to ask the people having problems whether their hardware is on SuSE's supported hardware list. People can run SuSE Linux on any hardware they like, and they can ask for advice on appropriate mailing lists. But they shouldn't start whinging to SuSE unless they have checked the hardware is supported (maybe it is, maybe it isn't, I don't know). We should also remember that the traffic on this list is heavily biased towards people having problems. I imagine the upgrade worked flawlessly on most systems. And one more thing: in the days before the update was released the messages on this list were along the lines of "Why haven't you released it yet, it can't take that long to build a kernel?". Obviously if they could have a few weeks for testing they could eliminate a lot of these problems. But they have to strike a balance. Bob ============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691

On Mon, Mar 31, 2003 at 11:11:19PM +0200, Hatto von Hatzfeld wrote:

I have had a frozen system twice after installing the new kernel in a SuSE 7.3 system (upgrading thus from 2.4.10 to 2.4.18). This never had happened before. But I am glad that this until now did not happen to my webserver (same SuSE 7.3, same patch). (And as I have written in another mail in this list, my Adaptec AVA-1505AE (SCSI controller) does not work any more.)

As someone had suggested before, after a further sudden system freeze (without any obvious reason) I just installed the kernel package k_deflt-2.4.19-274 (i.e. the update destinated for SuSE 8.1) to my SuSE 7.3. Now my SCSI controller is working again, and everything else seems to be fine as well. Of course I yet do not know whether any system freezes will occur in the next future... Bye, Hatto

50 klients of five major hardware groups, with variations within each. 10 servers, all different, with very different hardware and configurations. Problems one the one machine where I have a new Nvidia card, problems on the two servers where I have LVM setups. No problem which took more than 15 minutes to resolve. Radu, you loose your bet. That's 47 kernel upgrades that went without problems. I for my part am still happy with SuSE, and my pre-order for 8.2 is now in. :) Bjørn On 3 Apr 2003, Ken Schneider wrote:

Compaq lt1720US laptop, no problems with kernel update. You need to make sure that your /etc/sysconfig/kernel file is correct regarding the bootup modules installed (for mk_initrd) and run mk_initrd && lilo.

Ken

On Thu, 2003-04-03 at 03:45, Radu Voicu wrote:

...

Hi, Bob!

I am sure that your intentions are good, but I can bet that NOBODY upgraded the SuSE 8.0 default kernel k_deflt 2.4.18 without any problem...

I've tried on several machines, one was a Compaq Deskpro and other was IBM NetVista... do you think that those machines are supported by SuSE??!?

I don't want to start any flames on the list, but I'm pretty pissed off because all those machines was in production and remotely administered... and I've trusted SuSE like always... and they dissapointed me big time on this one...

Regards, Radu

----- Original Message ----- From: "Bob Vickers" To: "Eduard Avetisyan" Cc: ; Sent: Thursday, April 03, 2003 11:32 AM Subject: Re: [suse-security] Linux-Server is frozen after security update of kernel

...

On Wed, 2 Apr 2003, Eduard Avetisyan wrote:

...

I'm afraid it's time to ask - on what type of machine and what configuration has SuSE tested the new kernel ;-) Maybe all switch to exactly that type of hardware in the future?

It's also fair to ask the people having problems whether their hardware is on SuSE's supported hardware list. People can run SuSE Linux on any hardware they like, and they can ask for advice on appropriate mailing lists. But they shouldn't start whinging to SuSE unless they have checked the hardware is supported (maybe it is, maybe it isn't, I don't know).

We should also remember that the traffic on this list is heavily biased towards people having problems. I imagine the upgrade worked flawlessly on most systems.

And one more thing: in the days before the update was released the messages on this list were along the lines of "Why haven't you released it yet, it can't take that long to build a kernel?". Obviously if they could have a few weeks for testing they could eliminate a lot of these problems. But they have to strike a balance.

Bob ============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691

-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here

-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here

-- Bjørn Tore Sund Phone: (+47) 555-84894 Stupidity is like a System administrator Fax: (+47) 555-89672 fractal; universal and Math. Department Mobile: (+47) 918 68075 infinitely repetitive. University of Bergen VIP: 81724 teknisk@mi.uib.no Email: bjornts@mi.uib.no http://www.mi.uib.no/

On Thu, 2003-04-03 at 09:15, Radu Voicu wrote:

You are sure that we are talking SPECIFICALLY about SuSE Professional 8.0?

Kernel ftp://ftp.suse.com/pub/suse/i386/update/8.0/kernel/2.4.18-20030324/k_deflt-2 .4.18-261.i386.rpm ?!??!

If you are positive about the above 2 points, then the bet is off, indeed...

P.S. I've never said that I will quit SuSE from now on... I stick with'em since version 5.3 ...and right now I'm installing a 8.1 route server... so... ;)

Have a lot of fun... Radu

----- Original Message ----- From: "Bjorn Tore Sund" To: Sent: Thursday, April 03, 2003 4:55 PM Subject: Re: [suse-security] Linux-Server is frozen after security update of kernel

...

50 klients of five major hardware groups, with variations within each. 10 servers, all different, with very different hardware and configurations. Problems one the one machine where I have a new Nvidia card, problems on the two servers where I have LVM setups. No problem which took more than 15 minutes to resolve.

Radu, you loose your bet. That's 47 kernel upgrades that went without problems. I for my part am still happy with SuSE, and my pre-order for 8.2 is now in. :)

Bjørn

On 3 Apr 2003, Ken Schneider wrote:

Yes, 8.0 pro modified greatly using apt-get. Ken

...

...

Compaq lt1720US laptop, no problems with kernel update. You need to make sure that your /etc/sysconfig/kernel file is correct regarding the bootup modules installed (for mk_initrd) and run mk_initrd && lilo.

Ken

On Thu, 2003-04-03 at 03:45, Radu Voicu wrote:

...

Hi, Bob!

I am sure that your intentions are good, but I can bet that NOBODY

...

...

...

the SuSE 8.0 default kernel k_deflt 2.4.18 without any problem...

I've tried on several machines, one was a Compaq Deskpro and other was IBM NetVista... do you think that those machines are supported by SuSE??!?

I don't want to start any flames on the list, but I'm pretty pissed off because all those machines was in production and remotely administered... and I've trusted SuSE like always... and they dissapointed me big time on this one...

Regards, Radu

----- Original Message ----- From: "Bob Vickers" To: "Eduard Avetisyan" Cc: ; Sent: Thursday, April 03, 2003 11:32 AM Subject: Re: [suse-security] Linux-Server is frozen after security update of kernel

...

On Wed, 2 Apr 2003, Eduard Avetisyan wrote:

...

I'm afraid it's time to ask - on what type of machine and what configuration has SuSE tested the new kernel ;-) Maybe all switch to exactly that type of hardware in the future?

It's also fair to ask the people having problems whether their hardware is on SuSE's supported hardware list. People can run SuSE Linux on any hardware they like, and they can ask for advice on appropriate mailing lists. But they shouldn't start whinging to SuSE unless they have checked the hardware is supported (maybe it is, maybe it isn't, I don't know).

We should also remember that the traffic on this list is heavily biased towards people having problems. I imagine the upgrade worked flawlessly on most systems.

And one more thing: in the days before the update was released the messages on this list were along the lines of "Why haven't you released it yet, it can't take that long to build a kernel?". Obviously if they could have a few weeks for testing they could eliminate a lot of these

upgraded problems.

...

...

...

...

But they have to strike a balance.

Bob ============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691

-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here

-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here

-- Bjørn Tore Sund Phone: (+47) 555-84894 Stupidity is like a System administrator Fax: (+47) 555-89672 fractal; universal and Math. Department Mobile: (+47) 918 68075 infinitely repetitive. University of Bergen VIP: 81724 teknisk@mi.uib.no Email: bjornts@mi.uib.no http://www.mi.uib.no/

-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here

Hello all, On Tue, 1 Apr 2003 21:09:40 +0200 Arjen Runsink wrote:

...

...

I have had a frozen system twice after installing the new kernel What machine types did you all experience the freezes?

After my previous message a nice discussion followed about what should and shouldn't. That we all are still gonna buy 8.2 and that you did 50 installs without a hitch. What I still am curious about is processor-type with which this happened. Also if you have 50 installs without faults? Which root-fs was this? ext2 or 8.1 and ext3? BB, Suit