[Bug 559867] New: bind-9.5.0P2-18.8.1 (security patch) becomes unresponsive and uses up a lot of CPU
http://bugzilla.novell.com/show_bug.cgi?id=559867 http://bugzilla.novell.com/show_bug.cgi?id=559867#c0 Summary: bind-9.5.0P2-18.8.1 (security patch) becomes unresponsive and uses up a lot of CPU Classification: openSUSE Product: openSUSE 11.1 Version: Final Platform: x86-64 OS/Version: openSUSE 11.1 Status: NEW Severity: Critical Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: ken@turnkey.com.au QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.15) Gecko/2009102100 SUSE/3.0.15-0.1.2 Firefox/3.0.15 GTB6 I applied the security update to bind today. Sometime later after users complained that names were not resolved, I found that named was not responding to requests and also clocked up a lot of CPU time. # ps ax | grep named 9268 ? Ssl 1399:37 /usr/sbin/named -t /var/lib/named -u named # strace -p 9268 Process 9268 attached - interrupt to quit rt_sigsuspend([] Nothing abnormal in log files. This happened on all 3 identical servers in a cluster so it would not have been misconfiguration of one. These binds are configured as origin servers and also to do full resolution of queries (no forwarders). The only thing special about the configuration is that they are configured as dual view servers with one view for internal zone and one for the external zone. Reverting to bind-9.5.0P2-18.7.1 fixed the issue. Names are properly resolved and named doesn't use up a lot of CPU. Reproducible: Always Steps to Reproduce: 1. Upgrade to bind-9.5.0P2-18.8.1 2. After a while, maybe 10-30 minutes, named become unresponsive 3. Kill it (needs -KILL, -TERM doesn't work) and restart. 4. Works for a while, then stops responding. Actual Results: Named not responding and chewing up CPU. Expected Results: Normal service by named as in previous version. I would be happy to provide more information and/or test any new releases on one of the servers. But currently I have reverted to 18.7.1 because I have to keep the service running. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c1
Marcus Meissner
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c2
--- Comment #2 from Ken Yap
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c3
Uwe Gansert
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c4
--- Comment #4 from Ken Yap
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c5
--- Comment #5 from Ken Yap
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c6
--- Comment #6 from Ken Yap
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c7
--- Comment #7 from Ken Yap
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c8
--- Comment #8 from Ken Yap
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c9
--- Comment #9 from Uwe Gansert
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c10
--- Comment #10 from Ken Yap
http://bugzilla.novell.com/show_bug.cgi?id=559867
http://bugzilla.novell.com/show_bug.cgi?id=559867#c11
Uwe Gansert
participants (1)
-
bugzilla_noreply@novell.com