Log4j bug cve-2021-44228. How to upgrade with openhabian?

Setup, Configuration and Use Installation
1

Hi,
I am using openhab 3.0.1 from openhabian. I would like to upgrade to a version where the log4j issue is fixed. How can I do this?
If I do an upgrade with the openhabian-config (menu 02). I get the following errors. How can I upgrade to 3.0.4 or 3.1.1?

Thanks ,Alex

openhabian@openhab3:~ $ sudo openhabian-config
[sudo] password for openhabian:
2021-12-14_08:53:28_CET [openHABian] Checking for root privileges… OK
2021-12-14_08:53:29_CET [openHABian] Loading configuration file ‘/etc/openhabian .conf’… OK
2021-12-14_08:53:35_CET [openHABian] openHABian configuration tool version: [openHAB3]{2021-12-02T09:19:37-07:00}(bb960d8)
2021-12-14_08:53:35_CET [openHABian] Checking for changes in origin branch openHAB3… OK
2021-12-14_08:53:39_CET [openHABian] Switching to branch openHAB3… OK
2021-12-14_08:53:39_CET [openHABian] Adding slightly tuned bash configuration files to system… OK
2021-12-14_08:53:54_CET [openHABian] Updating Linux package information… OK
2021-12-14_08:53:54_CET [openHABian] Updating repositories and upgrading installed packages…
Reading package lists… Done
Building dependency tree
Reading state information… Done
Calculating upgrade… Done
The following packages will be upgraded:
alsa-utils apt apt-transport-https apt-utils avahi-autoipd avahi-daemon base-files bind9-host bluez curl dnsutils exim4 exim4-base exim4-config exim4-daemon-light firmware-atheros firmware-brcm80211 firmware-libertas firmware-misc-nonfree firmware-realtek grafana groff-base influxdb iputils-ping isc-dhcp-client
isc-dhcp-common klibc-utils libapt-inst2.0 libapt-pkg5.0 libasound2 libasound2-data libavahi-client3 libavahi-common-data libavahi-common3 libavahi-core7 libbind9-161 libbluetooth-dev libbluetooth3 libbsd0 libc-bin libc-dev-bin libc-l10n libc6 libc6-dbg libc6-dev libcurl3-gnutls libcurl4 libdns-export1104
libdns1104 libgcrypt20 libgnutls-dane0 libgnutls30 libgssapi-krb5-2 libhogweed4 libirs161 libisc-export1100 libisc1100 libisccc161 libisccfg163 libk5crypto3 libklibc libkrb5-3 libkrb5support0 libldap-2.4-2 libldap-common libldb1 liblwres161 liblz4-1 libmariadb3 libnettle6 libnftnl11 libpam-systemd libpigpio-dev
libpigpio1 libpigpiod-if-dev libpigpiod-if1 libpigpiod-if2-1 libpython3.7 libpython3.7-dev libpython3.7-minimal libpython3.7-stdlib libraspberrypi-bin libraspberrypi-dev libraspberrypi-doc libraspberrypi0 libssl1.1 libsystemd0 libudev1 libx11-6 libx11-data libxml2 libzstd1 linux-libc-dev locales mariadb-common
multiarch-support nodejs openhab openhab-addons openssh-client openssh-server openssh-sftp-server openssl pi-bluetooth pigpio pigpio-tools pigpiod python-dnspython python-ldb python3.7 python3.7-dev python3.7-minimal raspberrypi-bootloader raspberrypi-kernel raspberrypi-net-mods raspberrypi-sys-mods rpi-eeprom
rpi-update screen ssh systemd systemd-sysv udev wpasupplicant
124 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 5,473 kB/723 MB of archives.
After this operation, 118 MB of additional disk space will be used.
Err:1 Index of /raspbian buster/main armhf base-files armhf 10.3+rpi1+deb10u10
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:2 Index of /raspbian buster/main armhf libgssapi-krb5-2 armhf 1.17-3+deb10u2
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:3 Index of /raspbian buster/main armhf libkrb5-3 armhf 1.17-3+deb10u2
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:4 Index of /raspbian buster/main armhf libkrb5support0 armhf 1.17-3+deb10u2
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:5 Index of /raspbian buster/main armhf libk5crypto3 armhf 1.17-3+deb10u2
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:6 Index of /raspbian buster/main armhf libisc-export1100 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:7 Index of /raspbian buster/main armhf libdns-export1104 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:8 Index of /raspbian buster/main armhf bind9-host armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:9 Index of /raspbian buster/main armhf dnsutils armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:10 Index of /raspbian buster/main armhf libbind9-161 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:11 Index of /raspbian buster/main armhf libisccfg163 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:12 Index of /raspbian buster/main armhf libisccc161 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:13 Index of /raspbian buster/main armhf libirs161 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:14 Index of /raspbian buster/main armhf libdns1104 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:15 Index of /raspbian buster/main armhf libisc1100 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:16 Index of /raspbian buster/main armhf liblwres161 armhf 1:9.11.5.P4+dfsg-5.1+deb10u5
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:17 Index of /raspbian buster/main armhf mariadb-common all 1:10.3.29-0+deb10u1
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
Err:18 Index of /raspbian buster/main armhf libmariadb3 armhf 1:10.3.29-0+deb10u1
404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/base-files/base-files_10.3+rpi1+deb10u10_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/k/krb5/libgssapi-krb5-2_1.17-3+deb10u2_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/k/krb5/libkrb5-3_1.17-3+deb10u2_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/k/krb5/libkrb5support0_1.17-3+deb10u2_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/k/krb5/libk5crypto3_1.17-3+deb10u2_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/libisc-export1100_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/libdns-export1104_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/bind9-host_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/dnsutils_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/libbind9-161_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/libisccfg163_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/libisccc161_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/libirs161_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/libdns1104_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/libisc1100_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/b/bind9/liblwres161_9.11.5.P4+dfsg-5.1+deb10u5_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/m/mariadb-10.3/mariadb-common_10.3.29-0+deb10u1_all.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/m/mariadb-10.3/libmariadb3_10.3.29-0+deb10u1_armhf.deb 404 Not Found [IP: 2a00:1098:0:80:1000:75:0:3 80]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
FAILED

3

It looks like apt is trying to fetch older versions of packages, which have been replaced by newer minor releases. E.g the base-files-package it’s trying to download is 10.3+rpi1+deb10u10, but the version available is 10.3+rpi1+deb10u11. What output does sudo apt update yield?

On another note: it looks like your system haven’t been updated in quite a while. If you want to keep it secure you need to upgrade more often, not just when there’s a big CVE announcement. Otherwise you miss a lot of security patches which might be (almost) equally critical, but doesn’t get as much attention.

3 Likes
4

this helped. Thanks