Package: rsyslog Version: 3.18.2-1 Severity: important Tags: patch Hi,
if you have a forwarding setup where the remote syslog server (tcp) becomes unavailable input throttling of imuxsock can lead to a denial of service. Situation is as follows: 1. You forward your syslog messages via tcp to a remote server 2. Remote server becomes unavailable 3. You have some processes generating syslog messages (like a mailserver on load) Under this circumstances rsyslog < 3.18.3 throttles incoming messages from the imuxsock plugin which can lead to a situation where /dev/log blocks, so if you try to login via ssh now the sshd process blocks because it cannot log anymore. See http://lists.adiscon.net/pipermail/rsyslog/2008-August/001039.html for a discussion for the problem and http://git.adiscon.com/?p=rsyslog.git;a=blobdiff;f=plugins/imuxsock/imuxsock.c;h=60ccaffbc526a03011be3ce5869e40bc3e32c319;hp=f8798039c5d53e58fc7fa17807547862e08c999e;hb=8eb888d049da12e1294a7688432b6325794ade32;hpb=02f768c37dac9dde424bbd31e378482750fc276c for a fix. Please fix this for lenny too. (Either with upgrading to 3.18.5 or applying that fix). I tested that fix on one of my etch boxes with an rsyslogd backport and it works fine. Thanks in advance Alex -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.27 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
