[INFO-141] Http proxy not running - restarted notification + segfaults in kernel log since this morning

Question

Update 11:27 Sophos official workaround https://community.sophos.com/kb/en-us/127257 Update 13:48 Sophos fix: https://community.sophos.com/kb/en-us/127257 A new pattern called u2d-appctrl43-9-42 was recently released to resolve this issue. Please enable application control again. Manual Cleanup required /var/storages/cores could contain large coredump files that need to be manually removed. 
 Good morning, 
 
 This morning we received multiple [INFO-141] Http proxy not running - restarted notifications around 09:11 
 When looking in the log's it seemed it occured straight after an up2date pattern update. 
 Looking in the kernel logs: 
 2017:08:07-09:11:17 gateway-1 kernel: [1448439.994411] NAVLWorker_01[31756]: segfault at 18b09499 ip 00000000f68495da sp 00000000e8cc0fec error 4 in libc-2.11.3.so[f67cd000+16c000]
2017:08:07-09:24:28 gateway-1 kernel: [1449231.586930] NAVLWorker_10[32179]: segfault at e78ba000 ip 00000000f68045e1 sp 00000000c36d8fbc error 4 in libc-2.11.3.so[f6788000+16c000]
2017:08:07-09:25:09 gateway-1 kernel: [1449272.038211] NAVLWorker_01[5095]: segfault at e9122000 ip 00000000f68875e1 sp 00000000bed45fbc error 4 in libc-2.11.3.so[f680b000+16c000]
2017:08:07-09:26:18 gateway-1 kernel: [1449341.488162] NAVLWorker_08[5501]: segfault at 4ca50b2b ip 00000000f68625df sp 00000000e7ed2fbc error 4 in libc-2.11.3.so[f67e6000+16c000]

sachingurung · Accepted Answer

Update, the segfaults are caused by Application Control due to a faulty pattern update. Please disable Application Control while we are working on a fixed pattern. 
 Thank you

twister5800 · Answer

I now get a lot of (from the customers): 
 Data Disk is filling up - please check. Current usage: 82% 
 
 For several of our managed UTM's, this is due to this bug with HTTPPROXY Core dumps. 
 As the bug is going to be fixed, you can safely backup or delete the dumps, (I deleted them :-) ) 
 
 As you can see the httpproxy.NAVLWorker files are huge! 
 I just did a "rm *" in the /var/storage/cores folder and all is good, as I do not need the other dumps either, else you can just delete with "rm httpproxy.*": 
 
 HTH :-)

ChrisBKA · Answer

Yeee, just wait some time ... did it the same way ... up2date maybe exhausted ;-)