Resolved [abrt] openssh-server: sshd killed by SIGSEGV

[Pentarou]

Hello,

After a successful upgrade to Obsidian, I am flooded with e-mails from localhost:

[abrt] openssh-server: sshd killed by SIGSEGV
reason: sshd killed by SIGSEGV

What causes this and how do I resolve this?

Thank you in advance.

 

[Gianluca]

Hello, here the same issue:

Subject: [abrt] openssh-server: sshd killed by SIGSEGV

reason: sshd killed by SIGSEGV
cmdline: 'sshd: unknown [priv]'
executable: /usr/sbin/sshd
package: openssh-server-7.4p1-21.el7
component: openssh
pid: 13642
pwd: /
hostname: xxxxxxxxxxxxxxxxxxxxxxxxxxxx
count: 1
abrt_version: 2.1.11
analyzer: CCpp
architecture: x86_64
event_log:
global_pid: 13642
kernel: 3.10.0-1062.1.1.el7.x86_64
last_occurrence: 1569667850
os_release: CentOS Linux release 7.7.1908 (Core)
pkg_arch: x86_64
pkg_epoch: 0
pkg_fingerprint: 24C6 A8A7 F4A8 0EB5
pkg_name: openssh-server
pkg_release: 21.el7
pkg_vendor: CentOS
pkg_version: 7.4p1
runlevel: N 3
time: Sat 28 Sep 2019 12:50:50 PM CEST
type: CCpp
uid: 0
ureports_counter: 1
username: root
uuid:

reported_to:
...................................

 

[Pentarou]

My inbox now has more than 6,000 emails with this notification, I can't find anything on the Plesk Support pages about this.

 

[Ales]

Well, for starters, is sshd actually getting killed over an over again? Perhaps the server logs could tell more.

Second, abrt can be configured to go easy on the mails. I would recommend fixing the cause for this and only suppressing the notifications for as long as it takes.

 

[Anthony]

Thank you for the report. The issue confirmed and registered using id #PPPM-10986. This issue will be fixed in future updates.

 

[Pentarou]

Thank you for the report. The issue confirmed and registered using id #PPPM-10986. This issue will be fixed in future updates.

Thank you very much!

 

[jimmy joseph]

is this reolved? if what is the plesk release version? i'm badly hit by this issue..

 

[Pentarou]

I have installed quite a few updates, but the problem persists here too. My mailbox is flooded with thousands of e-mails every day, how do I disable e-mail reporting for the time being?

Thanks in advance!

 

[jimmy joseph]

me too-- i have to do somehting to turn off emails..

 

[arxerisdam]

is there a way to stop the emails flooding the mail server?

 

[fogelf]

Yes.
1. You should edit /etc/abrt/abrt-action-save-package-data.conf
Find section

# Blacklisted packages
#
BlackList = nspluginwrapper, valgrind, strace, mono-core

and add sshd
2. Restart service using systemctl restart abrtd.service command
3 Wait fix )

 

[jimmy joseph]

thank you - its sad that plesk never respond to our questions..

 

[IgorG]

its sad that plesk never respond to our questions

What do you mean?

 

[Pentarou]

is there a way to stop the emails flooding the mail server?

Yes, I can confirm that changing the SSH port stops flooding your inbox and makes your server even more secure, thanks to Martin Dias from the Plesk Online Community on Facebook for the heads-up.