NEWS
NPM AUDIT FIX?
ioBroker Allgemein
24
Beiträge
4
Kommentatoren
2.3k
Aufrufe
3
Watching
-
@thomas-braun ich bin doch als User angemeldet.
Standarduser "Pi" von der ioBroker Installation.Also einfach stehen lassen die "Fehler"?
Dann bitte vollständige Ein- und Ausgabezeilen posten, nix weg lassen.
-
Hallo, wenn ich etwas über NPM installieren möchte sagt er immer, dass ich "npm audit fix --force" ausführen soll
Nach der Ausführug kommt aber immer nur das hier:
# npm audit report lodash <=4.17.20 Severity: critical Regular Expression Denial of Service (ReDoS) in lodash - https://github.com/advisories/GHSA-x5rq-j2xg-h7qm Prototype Pollution in lodash - https://github.com/advisories/GHSA-4xc9-xhrj-v574 Prototype Pollution in lodash - https://github.com/advisories/GHSA-fvqr-27wr-82fm Regular Expression Denial of Service (ReDoS) in lodash - https://github.com/advisories/GHSA-29mw-wpgm-hmr9 Prototype Pollution in lodash - https://github.com/advisories/GHSA-jf85-cpcp-j695 Command Injection in lodash - https://github.com/advisories/GHSA-35jh-r3h4-6jhm Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw fix available via `npm audit fix --force` Will install iobroker.knx@2.0.18, which is a breaking change node_modules/machina/node_modules/lodash node_modules/xml2js-xpath/node_modules/lodash machina 0.3.7 - 2.0.2 Depends on vulnerable versions of lodash node_modules/machina iobroker.knx <=0.8.6 Depends on vulnerable versions of machina Depends on vulnerable versions of xml2js Depends on vulnerable versions of xml2js-xpath node_modules/iobroker.knx xml2js-xpath <=0.9.0 Depends on vulnerable versions of lodash node_modules/xml2js-xpath xml2js <=0.4.23 Severity: high xml2js is vulnerable to prototype pollution - https://github.com/advisories/GHSA-776f-qx25-q3cc fix available via `npm audit fix --force` Will install iobroker.knx@2.0.18, which is a breaking change node_modules/iobroker.knx/node_modules/xml2js 5 vulnerabilities (4 high, 1 critical) To address all issues (including breaking changes), run: npm audit fix --forceAb und zu kommen 5 vulnerabilities, manchmal nur 4. Aber weg gehen sie nicht...
Außerdem frage ich mich, wieso er KNX <=0.8.6 bemängelt, obwohl ich 2.0.13 installiert habe!
@loverz sagte in NPM AUDIT FIX?:
Außerdem frage ich mich, wieso er KNX <=0.8.6 bemängelt, obwohl ich 2.0.13 installiert habe!
Wäre noch ein
iob diagwie hier noch offen
https://forum.iobroker.net/topic/63771/warnmeldungen-bei-adapterinstallationIch vermute mal dein System ist strubbelig
und warum per npm installieren
knx@2.0.18ist im Beta Repo vorhanden
-
@loverz sagte in NPM AUDIT FIX?:
Außerdem frage ich mich, wieso er KNX <=0.8.6 bemängelt, obwohl ich 2.0.13 installiert habe!
Wäre noch ein
iob diagwie hier noch offen
https://forum.iobroker.net/topic/63771/warnmeldungen-bei-adapterinstallationIch vermute mal dein System ist strubbelig
und warum per npm installieren
knx@2.0.18ist im Beta Repo vorhanden
-
@glasfaser hab das per NPM gemacht, weil ich es in der Weboberfläche nicht gesehen habe und von Linux so gut wie keine Ahnung habe.
Wie man das Beta Repo lädt weiß ich allerdings, das hätte ich machen können.
Mache gleich mal ein Fix@loverz sagte in NPM AUDIT FIX?:
Mache gleich mal ein Fix
Gib mal die Ausgabe vom
iob diagdanach. Da scheint mir noch mehr krumm zu sein. -
@loverz sagte in NPM AUDIT FIX?:
Mache gleich mal ein Fix
Gib mal die Ausgabe vom
iob diagdanach. Da scheint mir noch mehr krumm zu sein.@thomas-braun sagte in NPM AUDIT FIX?:
Gib mal die Ausgabe vom iob diag danach.
Ist wohl Geheim ... :)
-
Dann bitte vollständige Ein- und Ausgabezeilen posten, nix weg lassen.
@thomas-braun sagte in NPM AUDIT FIX?:
Dann bitte vollständige Ein- und Ausgabezeilen posten, nix weg lassen.
login as: pi pi@192.168.1.166's password: Linux ioBroker-RasPi4 5.10.103-v7l+ #1529 SMP Tue Mar 8 12:24:00 GMT 2022 armv7l The programs included with the Debian GNU/Linux system are free software; the exact distribution terms for each program are described in the individual files in /usr/share/doc/*/copyright. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. Last login: Sun Apr 9 20:55:43 2023 from 192.168.1.152 pi@ioBroker-RasPi4:~ $ npm audit fix --force npm WARN using --force Recommended protections disabled. npm WARN audit Updating iobroker.knx to 2.0.18, which is a SemVer major change. npm WARN deprecated xmldom@0.1.31: Deprecated due to CVE-2021-21366 resolved in 0.5.0 added 189 packages, removed 14 packages, changed 2 packages, and audited 205 packages in 46s 38 packages are looking for funding run `npm fund` for details # npm audit report class-validator <0.14.0 Severity: critical SQL Injection and Cross-site Scripting in class-validator - https://github.com/advisories/GHSA-fj58-h2fr-3pp2 fix available via `npm audit fix --force` Will install iobroker.knx@0.8.6, which is a breaking change node_modules/javascript-obfuscator/node_modules/class-validator javascript-obfuscator 0.7.0-dev.1 - 4.0.0 Depends on vulnerable versions of class-validator node_modules/javascript-obfuscator iobroker.knx >=0.8.0 Depends on vulnerable versions of javascript-obfuscator Depends on vulnerable versions of jsonwebtoken Depends on vulnerable versions of xmldom node_modules/iobroker.knx jsonwebtoken <=8.5.1 Severity: moderate jsonwebtoken unrestricted key type could lead to legacy keys usage - https://github.com/advisories/GHSA-8cf7-32gw-wr33 jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC - https://github.com/advisories/GHSA-hjrf-2m68-5959 jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() - https://github.com/advisories/GHSA-qwph-4952-7xr6 fix available via `npm audit fix --force` Will install iobroker.knx@0.8.6, which is a breaking change node_modules/jsonwebtoken xmldom * Severity: critical Misinterpretation of malicious XML input - https://github.com/advisories/GHSA-5fg8-2547-mr8q Misinterpretation of malicious XML input - https://github.com/advisories/GHSA-h6q6-9hqw-rwfv xmldom allows multiple root nodes in a DOM - https://github.com/advisories/GHSA-crh6-fp67-6883 fix available via `npm audit fix --force` Will install iobroker.knx@0.8.6, which is a breaking change node_modules/xmldom 5 vulnerabilities (1 moderate, 4 critical) To address all issues (including breaking changes), run: npm audit fix --force pi@ioBroker-RasPi4:~ $ -
@thomas-braun sagte in NPM AUDIT FIX?:
Dann bitte vollständige Ein- und Ausgabezeilen posten, nix weg lassen.
login as: pi pi@192.168.1.166's password: Linux ioBroker-RasPi4 5.10.103-v7l+ #1529 SMP Tue Mar 8 12:24:00 GMT 2022 armv7l The programs included with the Debian GNU/Linux system are free software; the exact distribution terms for each program are described in the individual files in /usr/share/doc/*/copyright. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. Last login: Sun Apr 9 20:55:43 2023 from 192.168.1.152 pi@ioBroker-RasPi4:~ $ npm audit fix --force npm WARN using --force Recommended protections disabled. npm WARN audit Updating iobroker.knx to 2.0.18, which is a SemVer major change. npm WARN deprecated xmldom@0.1.31: Deprecated due to CVE-2021-21366 resolved in 0.5.0 added 189 packages, removed 14 packages, changed 2 packages, and audited 205 packages in 46s 38 packages are looking for funding run `npm fund` for details # npm audit report class-validator <0.14.0 Severity: critical SQL Injection and Cross-site Scripting in class-validator - https://github.com/advisories/GHSA-fj58-h2fr-3pp2 fix available via `npm audit fix --force` Will install iobroker.knx@0.8.6, which is a breaking change node_modules/javascript-obfuscator/node_modules/class-validator javascript-obfuscator 0.7.0-dev.1 - 4.0.0 Depends on vulnerable versions of class-validator node_modules/javascript-obfuscator iobroker.knx >=0.8.0 Depends on vulnerable versions of javascript-obfuscator Depends on vulnerable versions of jsonwebtoken Depends on vulnerable versions of xmldom node_modules/iobroker.knx jsonwebtoken <=8.5.1 Severity: moderate jsonwebtoken unrestricted key type could lead to legacy keys usage - https://github.com/advisories/GHSA-8cf7-32gw-wr33 jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC - https://github.com/advisories/GHSA-hjrf-2m68-5959 jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() - https://github.com/advisories/GHSA-qwph-4952-7xr6 fix available via `npm audit fix --force` Will install iobroker.knx@0.8.6, which is a breaking change node_modules/jsonwebtoken xmldom * Severity: critical Misinterpretation of malicious XML input - https://github.com/advisories/GHSA-5fg8-2547-mr8q Misinterpretation of malicious XML input - https://github.com/advisories/GHSA-h6q6-9hqw-rwfv xmldom allows multiple root nodes in a DOM - https://github.com/advisories/GHSA-crh6-fp67-6883 fix available via `npm audit fix --force` Will install iobroker.knx@0.8.6, which is a breaking change node_modules/xmldom 5 vulnerabilities (1 moderate, 4 critical) To address all issues (including breaking changes), run: npm audit fix --force pi@ioBroker-RasPi4:~ $ -
@loverz sagte in NPM AUDIT FIX?:
Mache gleich mal ein Fix
Gib mal die Ausgabe vom
iob diagdanach. Da scheint mir noch mehr krumm zu sein.@thomas-braun sagte in NPM AUDIT FIX?:
@loverz sagte in NPM AUDIT FIX?:
Mache gleich mal ein Fix
Gib mal die Ausgabe vom
iob diagdanach. Da scheint mir noch mehr krumm zu sein.@Glasfaser
======== Start marking the full check here =========Skript v.2023-04-02 *** BASE SYSTEM *** Model : Raspberry Pi 4 Model B Rev 1.2 Architecture : armv7l Docker : false Virtualization : none Distributor ID: Raspbian Description: Raspbian GNU/Linux 10 (buster) Release: 10 Codename: buster PRETTY_NAME="Raspbian GNU/Linux 10 (buster)" NAME="Raspbian GNU/Linux" VERSION_ID="10" VERSION="10 (buster)" VERSION_CODENAME=buster ID=raspbian ID_LIKE=debian HOME_URL="http://www.raspbian.org/" SUPPORT_URL="http://www.raspbian.org/RaspbianForums" BUG_REPORT_URL="http://www.raspbian.org/RaspbianBugs" Systemuptime and Load: 21:02:19 up 9 days, 22:30, 1 user, load average: 4.32, 3.95, 4.36 CPU threads: 4 *** Time and Time Zones *** Local time: Sun 2023-04-09 21:02:19 CEST Universal time: Sun 2023-04-09 19:02:19 UTC RTC time: n/a Time zone: Europe/Berlin (CEST, +0200) System clock synchronized: yes NTP service: active RTC in local TZ: no *** User and Groups *** pi /home/pi pi adm dialout cdrom sudo audio video plugdev games users input netdev gpio i2c spi iobroker *** X-Server-Setup *** X-Server: false Desktop: Terminal: tty Boot Target: graphical.target *** MEMORY *** total used free shared buff/cache available Mem: 3.9G 1.7G 756M 28M 1.5G 2.3G Swap: 511M 161M 350M Total: 4.4G 1.8G 1.1G 3888 M total memory 1651 M used memory 558 M active memory 2381 M inactive memory 756 M free memory 271 M buffer memory 1209 M swap cache 511 M total swap 161 M used swap 350 M free swap *** FILESYSTEM *** Filesystem Type Size Used Avail Use% Mounted on /dev/root ext4 118G 16G 97G 14% / devtmpfs devtmpfs 1.8G 0 1.8G 0% /dev tmpfs tmpfs 1.9G 0 1.9G 0% /dev/shm tmpfs tmpfs 1.9G 58M 1.9G 3% /run tmpfs tmpfs 5.0M 4.0K 5.0M 1% /run/lock tmpfs tmpfs 1.9G 0 1.9G 0% /sys/fs/cgroup /dev/mmcblk0p1 vfat 253M 49M 204M 20% /boot tmpfs tmpfs 389M 0 389M 0% /run/user/1000 Messages concerning ext4 filesystem in dmesg: [Thu Mar 30 22:31:53 2023] Kernel command line: coherent_pool=1M 8250.nr_uarts=1 snd_bcm2835.enable_compat_alsa=0 snd_bcm2835.enable_hdmi=1 smsc95xx.macaddr=DC:A6:32:86:53:AE vc_mem.mem_base=0x3f000000 vc_mem.mem_size=0x3f600000 dwc_otg.lpm_enable=0 console=tty1 root=PARTUUID=52e4cf4c-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait [Thu Mar 30 22:31:54 2023] EXT4-fs (mmcblk0p2): mounted filesystem with ordered data mode. Opts: (null) [Thu Mar 30 22:31:54 2023] VFS: Mounted root (ext4 filesystem) readonly on device 179:2. [Thu Mar 30 22:31:56 2023] EXT4-fs (mmcblk0p2): re-mounted. Opts: commit=600 Show mounted filesystems (real ones only): TARGET SOURCE FSTYPE OPTIONS / /dev/mmcblk0p2 ext4 rw,noatime,commit=600 |-/sys/fs/bpf none bpf rw,nosuid,nodev,noexec,relatime,mode=700 `-/boot /dev/mmcblk0p1 vfat rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=ascii,shortname=mixed,errors=remount-ro Files in neuralgic directories: /var: 3.8G /var/ 2.9G /var/cache/apt 2.9G /var/cache 2.8G /var/cache/apt/archives 399M /var/lib /opt/iobroker/backups: 3.6G /opt/iobroker/backups/ /opt/iobroker/iobroker-data: 402M /opt/iobroker/iobroker-data/ 183M /opt/iobroker/iobroker-data/files 147M /opt/iobroker/iobroker-data/backup-objects 72M /opt/iobroker/iobroker-data/files/telegram.admin 51M /opt/iobroker/iobroker-data/files/javascript.admin The five largest files in iobroker-data are: 20M /opt/iobroker/iobroker-data/objects.jsonl 15M /opt/iobroker/iobroker-data/files/telegram.admin/rules/static/js/vendors-node_modules_iobroker_adapter-react-v5_assets_devices_parseNames_d_ts-node_modules_io-1d9f06.44fe4a3f.chunk.js.map 14M /opt/iobroker/iobroker-data/objects.json.migrated 14M /opt/iobroker/iobroker-data/objects.json.bak.migrated 13M /opt/iobroker/iobroker-data/objects.json.old *** NodeJS-Installation *** /usr/bin/nodejs v16.19.1 /usr/bin/node v16.19.1 /usr/bin/npm 8.19.3 /usr/bin/npx 8.19.3 nodejs: Installed: 16.19.1-deb-1nodesource1 Candidate: 16.19.1-deb-1nodesource1 Version table: *** 16.19.1-deb-1nodesource1 500 500 https://deb.nodesource.com/node_16.x buster/main armhf Packages 100 /var/lib/dpkg/status 10.24.0~dfsg-1~deb10u3 500 500 http://raspbian.raspberrypi.org/raspbian buster/main armhf Packages Temp directories causing npm8 problem: 0 No problems detected *** ioBroker-Installation *** ioBroker Status iobroker is running on this host. Objects type: jsonl States type: jsonl Core adapters versions js-controller: 4.0.24 admin: 6.3.5 javascript: 6.1.4 npm ERR! code ELSPROBLEMS npm ERR! extraneous: @types/caseless@0.12.2 /opt/iobroker/node_modules/@types/caseless npm ERR! extraneous: @types/request@2.48.8 /opt/iobroker/node_modules/@types/request npm ERR! extraneous: @types/tough-cookie@4.0.2 /opt/iobroker/node_modules/@types/tough-cookie npm ERR! extraneous: coffeescript@1.12.7 /opt/iobroker/node_modules/coffeescript npm ERR! invalid: iobroker.sourceanalytix@0.4.14 /opt/iobroker/node_modules/iobroker.sourceanalytix npm ERR! invalid: iobroker.yahka@1.0.3 /opt/iobroker/node_modules/iobroker.yahka npm ERR! extraneous: jsonata@1.8.6 /opt/iobroker/node_modules/jsonata npm ERR! extraneous: node-inspect@2.0.0 /opt/iobroker/node_modules/node-inspect npm ERR! extraneous: suncalc2@1.8.1 /opt/iobroker/node_modules/suncalc2 npm ERR! extraneous: typescript@4.7.4 /opt/iobroker/node_modules/typescript npm ERR! extraneous: virtual-tsc@0.6.2 /opt/iobroker/node_modules/virtual-tsc npm ERR! A complete log of this run can be found in: npm ERR! /home/pi/.npm/_logs/2023-04-09T19_02_36_936Z-debug-0.log Adapters from github: 2 Adapter State + system.adapter.admin.0 : admin : Host-ioBroker - enabled, port: 8081, bind: 0.0.0.0, run as: admin + system.adapter.alexa2.0 : alexa2 : Host-ioBroker - enabled + system.adapter.backitup.0 : backitup : Host-ioBroker - enabled system.adapter.daswetter.0 : daswetter : Host-ioBroker - enabled + system.adapter.deconz.0 : deconz : Host-ioBroker - enabled, port: 80 system.adapter.easee.0 : easee : Host-ioBroker - disabled system.adapter.hmip.0 : hmip : Host-ioBroker - disabled + system.adapter.hs100.0 : hs100 : Host-ioBroker - enabled + system.adapter.hue.0 : hue : Host-ioBroker - enabled, port: 443 + system.adapter.influxdb.0 : influxdb : Host-ioBroker - enabled, port: 8086 + system.adapter.info.0 : info : Host-ioBroker - enabled + system.adapter.javascript.0 : javascript : Host-ioBroker - enabled + system.adapter.km200.0 : km200 : Host-ioBroker - enabled + system.adapter.knx.0 : knx : Host-ioBroker - enabled, bind: 192.168.1.166 system.adapter.mydlink.0 : mydlink : Host-ioBroker - disabled system.adapter.netatmo-crawler.0 : netatmo-crawler : Host-ioBroker - enabled + system.adapter.philips-tv.0 : philips-tv : Host-ioBroker - enabled + system.adapter.ping.0 : ping : Host-ioBroker - enabled + system.adapter.rpi2.0 : rpi2 : Host-ioBroker - enabled + system.adapter.shelly.0 : shelly : Host-ioBroker - enabled, port: 1882, bind: 192.168.1.166 system.adapter.solarmanpv.0 : solarmanpv : Host-ioBroker - enabled + system.adapter.sourceanalytix.0 : sourceanalytix : Host-ioBroker - enabled + system.adapter.telegram.0 : telegram : Host-ioBroker - enabled, port: 8443, bind: 0.0.0.0 + system.adapter.telegram.1 : telegram : Host-ioBroker - enabled, port: 8443, bind: 0.0.0.0 + system.adapter.yahka.0 : yahka : Host-ioBroker - enabled + system.adapter.yahka.3 : yahka : Host-ioBroker - enabled system.adapter.yeelight-2.0 : yeelight-2 : Host-ioBroker - disabled + instance is alive Enabled adapters with bindings + system.adapter.admin.0 : admin : Host-ioBroker - enabled, port: 8081, bind: 0.0.0.0, run as: admin + system.adapter.deconz.0 : deconz : Host-ioBroker - enabled, port: 80 + system.adapter.hue.0 : hue : Host-ioBroker - enabled, port: 443 + system.adapter.influxdb.0 : influxdb : Host-ioBroker - enabled, port: 8086 + system.adapter.shelly.0 : shelly : Host-ioBroker - enabled, port: 1882, bind: 192.168.1.166 + system.adapter.telegram.0 : telegram : Host-ioBroker - enabled, port: 8443, bind: 0.0.0.0 + system.adapter.telegram.1 : telegram : Host-ioBroker - enabled, port: 8443, bind: 0.0.0.0 ioBroker-Repositories stable : http://download.iobroker.net/sources-dist.json beta : http://download.iobroker.net/sources-dist-latest.json latest : http://iobroker.live/repo/sources-dist-latest.json Active repo(s): stable Installed ioBroker-Instances Used repository: stable Adapter "admin" : 6.3.5 , installed 6.3.5 Adapter "alexa2" : 3.23.2 , installed 3.23.2 Adapter "backitup" : 2.6.16 , installed 2.5.12 [Updatable] Adapter "daswetter" : 3.1.7 , installed 3.1.7 Adapter "deconz" : 1.3.21 , installed 1.3.21 Adapter "easee" : 1.0.7 , installed 1.0.7 Adapter "hmip" : 1.20.0 , installed 1.20.0 Adapter "hs100" : 2.1.2 , installed 2.1.2 Adapter "hue" : 3.7.1 , installed 3.7.1 Adapter "influxdb" : 3.2.0 , installed 3.2.0 Adapter "info" : 1.9.19 , installed 1.9.19 Adapter "javascript" : 6.1.4 , installed 6.1.4 Controller "js-controller": 4.0.24 , installed 4.0.24 Adapter "km200" : 2.0.3 , installed 2.0.3 Adapter "knx" : 2.0.17 , installed 2.0.18 Adapter "mydlink" : 1.1.12 , installed 1.2.1 Adapter "netatmo-crawler": 0.8.1 , installed 0.8.1 Adapter "philips-tv" : 0.5.3 , installed 0.5.3 Adapter "ping" : 1.5.3 , installed 1.5.3 Adapter "rpi2" : 1.3.2 , installed 1.3.2 Adapter "shelly" : 6.3.1 , installed 6.3.1 Adapter "solarmanpv" : 0.3.2 , installed 0.3.2 Adapter "telegram" : 1.15.2 , installed 1.15.2 Adapter "yahka" : 0.17.0 , installed 1.0.3 Adapter "yeelight-2" : 1.1.2 , installed 1.2.1 Objects and States Please stand by - This may take a while Objects: 10649 States: 9196 *** OS-Repositories and Updates *** Hit:1 http://phoscon.de/apt/deconz buster InRelease Hit:2 http://raspbian.raspberrypi.org/raspbian buster InRelease Hit:3 https://repos.influxdata.com/debian stretch InRelease Hit:4 https://packages.grafana.com/oss/deb stable InRelease Hit:5 http://archive.raspberrypi.org/debian buster InRelease Hit:6 https://deb.nodesource.com/node_16.x buster InRelease Hit:7 https://repo.homebridge.io stable InRelease Reading package lists... Pending Updates: 8 *** Listening Ports *** Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1000 18151 329/deCONZ tcp 0 0 127.0.0.1:45203 0.0.0.0:* LISTEN 1001 37357329 27699/io.yahka.0 tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 17042 724/sshd tcp 0 0 127.0.0.1:40471 0.0.0.0:* LISTEN 1001 37358987 27825/io.yahka.3 tcp 0 0 127.0.0.1:8088 0.0.0.0:* LISTEN 999 15030 715/influxd tcp 0 0 127.0.0.1:37529 0.0.0.0:* LISTEN 1001 37356391 27825/io.yahka.3 tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 1000 15429 329/deCONZ tcp 0 0 127.0.0.1:46237 0.0.0.0:* LISTEN 110 22065772 26253/homebridge tcp 0 0 0.0.0.0:45667 0.0.0.0:* LISTEN 1001 37358314 27699/io.yahka.0 tcp 0 0 0.0.0.0:33987 0.0.0.0:* LISTEN 1001 37358946 27825/io.yahka.3 tcp 0 0 127.0.0.1:44003 0.0.0.0:* LISTEN 110 37122721 26253/homebridge tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 1001 37351791 26616/iobroker.js-c tcp 0 0 127.0.0.1:9001 0.0.0.0:* LISTEN 1001 37350710 26616/iobroker.js-c tcp 0 0 127.0.0.1:44015 0.0.0.0:* LISTEN 1001 37357336 27699/io.yahka.0 tcp 0 0 127.0.0.1:33487 0.0.0.0:* LISTEN 110 30844253 26253/homebridge tcp6 0 0 :::8081 :::* LISTEN 1001 37349193 26658/io.admin.0 tcp6 0 0 :::51442 :::* LISTEN 110 22066377 26253/homebridge tcp6 0 0 :::8086 :::* LISTEN 999 15257 715/influxd tcp6 0 0 :::22 :::* LISTEN 0 17044 724/sshd tcp6 0 0 :::3000 :::* LISTEN 109 18727 709/grafana tcp6 0 0 :::8581 :::* LISTEN 110 16144 1285/hb-service udp 0 0 192.168.1.166:51103 0.0.0.0:* 1001 37362469 27037/io.knx.0 udp 0 0 0.0.0.0:1982 0.0.0.0:* 110 22066375 26253/homebridge udp 0 0 0.0.0.0:5683 0.0.0.0:* 1001 37352880 26913/io.shelly.0 udp 0 0 0.0.0.0:32831 0.0.0.0:* 108 14734 340/avahi-daemon: r udp 0 0 0.0.0.0:68 0.0.0.0:* 0 16583 706/dhcpcd udp 0 0 0.0.0.0:5353 0.0.0.0:* 110 20695 1285/hb-service udp 0 0 0.0.0.0:5353 0.0.0.0:* 108 14732 340/avahi-daemon: r udp 0 0 192.168.1.166:37733 0.0.0.0:* 1001 37351127 27037/io.knx.0 udp 0 0 0.0.0.0:1900 0.0.0.0:* 1001 37354334 27260/io.deconz.0 udp 0 0 0.0.0.0:1900 0.0.0.0:* 1000 15432 329/deCONZ udp6 0 0 :::546 :::* 0 2341956 706/dhcpcd udp6 0 0 :::5353 :::* 108 14733 340/avahi-daemon: r udp6 0 0 :::47388 :::* 108 14735 340/avahi-daemon: r udp6 0 0 :::1900 :::* 1001 37354337 27260/io.deconz.0 udp6 0 0 :::1900 :::* 1001 37354336 27260/io.deconz.0 udp6 0 0 :::1900 :::* 1001 37354335 27260/io.deconz.0 *** Log File - Last 25 Lines *** 2023-04-09 21:01:46.004 - warn: km200.0 (27476) This object will not be created in future versions. Please report this to the developer. 2023-04-09 21:01:46.087 - warn: km200.0 (27476) Object system.holidayModes.hm5.hcMode is invalid: obj.common.states has an invalid type! Expected "object", received "string" 2023-04-09 21:01:46.087 - warn: km200.0 (27476) This object will not be created in future versions. Please report this to the developer. 2023-04-09 21:01:46.768 - warn: km200.0 (27476) Object system.systemType is invalid: obj.common.states has an invalid type! Expected "object", received "string" 2023-04-09 21:01:46.769 - warn: km200.0 (27476) This object will not be created in future versions. Please report this to the developer. 2023-04-09 21:01:46.874 - info: km200.0 (27476) KM200 found 122 states, get their values now. 2023-04-09 21:01:46.889 - info: km200.0 (27476) Interval=30 min, Norm-list: dhwCircuits.dhw1.charge,dhwCircuits.dhw1.chargeDuration,dhwCircuits.dhw1.holidayMode.activated,dhwCircuits.dhw1.operationMode,dhwCircuits.dhw1.singleChargeSetpoint,dhwCircuits.dhw1.status,dhwCircuits.dhw1.temperatureLevels.high,dhwCircuits.dhw1.temperatureLevels.off,dhwCircuits.dhw1.waterFlow,dhwCircuits.dhw1.workingTime,heatSources.CHpumpModulation,heatSources.ChimneySweeper,heatSources.actualCHPower,heatSources.actualDHWPower,heatSources.applianceSupplyTemperature,heatSources.burnerModulationSetpoint,heatSources.burnerPowerSetpoint,heatSources.energyMonitoring.consumption,heatSources.energyMonitoring.correctionFactor,heatSources.energyMonitoring.maxTankLevel,heatSources.energyMonitoring.minTankLevel,heatSources.energyMonitoring.startDateTime,heatSources.energyMonitoring.tankLevel,heatSources.fanSpeed_setpoint,heatSources.gasAirPressure,heatSources.hs1.info,heatSources.hs1.type,heatSources.info,heatSources.nominalCHPower,heatSources.nominalDHWPower,heatSources.numberOfStarts,heatSources.powerSetpoint,heatSources.returnTemperature,heatSources.systemPressure,heatSources.workingTime.centralHeating,heatSources.workingTime.secondBurner,heatSources.workingTime.totalSystem,heatingCircuits.hc1.activeSwitchProgram,heatingCircuits.hc1.currentRoomSetpoint,heatingCircuits.hc1.currentSuWiMode,heatingCircuits.hc1.fastHeatupFactor,heatingCircuits.hc1.holidayMode.activated,heatingCircuits.hc1.operationMode,heatingCircuits.hc1.status,heatingCircuits.hc1.suWiSwitchMode,heatingCircuits.hc1.suWiThreshold,heatingCircuits.hc1.switchProgramMode,heatingCircuits.hc1.switchPrograms.A,heatingCircuits.hc1.switchPrograms.B,heatingCircuits.hc1.temperatureLevels.comfort2,heatingCircuits.hc1.temperatureLevels.eco,heatingCircuits.hc1.temporaryRoomSetpoint,notifications,recordings.dhwCircuits.dhw1.actualTemp._Hours,recordings.heatSources.actualCHPower._Hours,recordings.heatSources.actualDHWPower._Hours,recordings.heatSources.actualPower._Hours,recordings.heatSources.hs1.actualPower._Hours,recordings.heatingCircuits.hc1.roomtemperature._Hours,recordings.system.heatSources.hs1.actualPower._Hours,recordings.system.sensors.temperatures.outdoor_t1._Hours,system.brand,system.bus,system.healthStatus,system.holidayModes.hm1.assignedTo,system.holidayModes.hm1.dhwMode,system.holidayModes.hm1.hcMode,system.holidayModes.hm1.startStop,system.holidayModes.hm2.assignedTo,system.holidayModes.hm2.dhwMode,system.holidayModes.hm2.hcMode,system.holidayModes.hm2.startStop,system.holidayModes.hm3.assignedTo,system.holidayModes.hm3.dhwMode,system.holidayModes.hm3.hcMode,system.holidayModes.hm3.startStop,system.holidayModes.hm4.assignedTo,system.holidayModes.hm4.dhwMode,system.holidayModes.hm4.hcMode,system.holidayModes.hm4.startStop,system.holidayModes.hm5.assignedTo,system.holidayModes.hm5.dhwMode,system.holidayModes.hm5.hcMode,system.holidayModes.hm5.startStop,system.info,system.minOutdoorTemp,system.systemType 2023-04-09 21:01:46.890 - info: km200.0 (27476) Fast Interval=1 min, Fast-List: dhwCircuits.dhw1.actualTemp,dhwCircuits.dhw1.currentSetpoint,heatSources.actualModulation,heatSources.actualPower,heatSources.actualSupplyTemperature,heatSources.flameStatus,heatSources.hs1.actualModulation,heatSources.hs1.actualPower,heatSources.hs1.flameStatus,heatSources.supplyTemperatureSetpoint,heatingCircuits.hc1.actualSupplyTemperature,heatingCircuits.hc1.pumpModulation,heatingCircuits.hc1.supplyTemperatureSetpoint,system.appliance.actualSupplyTemperature,system.sensors.temperatures.hotWater_t2,system.sensors.temperatures.outdoor_t1,system.sensors.temperatures.return,system.sensors.temperatures.supply_t1,system.sensors.temperatures.supply_t1_setpoint 2023-04-09 21:01:46.891 - info: km200.0 (27476) Slow Interval=6 hours, Slow-List: recordings.dhwCircuits.dhw1.actualTemp._Days,recordings.dhwCircuits.dhw1.actualTemp._Months,recordings.heatSources.actualCHPower._Days,recordings.heatSources.actualCHPower._Months,recordings.heatSources.actualDHWPower._Days,recordings.heatSources.actualDHWPower._Months,recordings.heatSources.actualPower._Days,recordings.heatSources.actualPower._Months,recordings.heatSources.hs1.actualPower._Days,recordings.heatSources.hs1.actualPower._Months,recordings.heatingCircuits.hc1.roomtemperature._Days,recordings.heatingCircuits.hc1.roomtemperature._Months,recordings.system.heatSources.hs1.actualPower._Days,recordings.system.heatSources.hs1.actualPower._Months,recordings.system.sensors.temperatures.outdoor_t1._Days,recordings.system.sensors.temperatures.outdoor_t1._Months 2023-04-09 21:02:16.083 - info: km200.0 (27476) Set km200.0.heatingCircuits.hc1.activeSwitchProgram to 0 2023-04-09 21:02:17.519 - info: km200.0 (27476) Adapter km200 initialization finished with 122 states. 2023-04-09 21:02:18.093 - info: km200.0 (27476) Update {'heatingCircuits.hc1.activeSwitchProgram': {type: 'state',id: 'heatingCircuits.hc1.activeSwitchProgram',common: {id: 'heatingCircuits.hc1.activeSwitchProgram',name: 'heatingCircuits.hc1.activeSwitchProgram',type: 'number',unit: '',read: true,write: true,role: 'level',states: '0:A;1:B',min: 0,max: 1,native: [Object]},native: { km200: [Object] }}} 2023-04-09 21:02:32.156 - info: alexa2.0 (26960) Unknown Device, but enabling commands, Try it and report back if commands work. 2023-04-09 21:02:32.157 - info: alexa2.0 (26960) Report to developer as GitHub issue with details for device. Please grab full next line pot. from logfile on disk if cutted 2023-04-09 21:02:32.157 - info: alexa2.0 (26960) Device-type:AH6MYEHSW61SM - Sebastian's L67 (L67) (MULTI_WAKEWORDS_SUPPORTED,VOLUME_SETTING,SLEEP,DREAM_TRAINING,APPLE_MUSIC,AMAZON_MUSIC,KINDLE_BOOKS,ASCENDING_ALARM_VOLUME,CHANGE_NAME,MICROPHONE,TUNE_IN,MUSIC_SKILL,PERSISTENT_CONNECTION,TIDAL,TOUCH_INITIATED,SUPPORTS_LOCALE,DEEZER,DEREGISTER_DEVICE,AUDIBLE,CUSTOM_ALARM_TONE,SUPPORTS_CONNECTED_HOME_CLOUD_ONLY,SIRIUSXM,SET_TIME_ZONE,AUDIO_PLAYER,ADAPTIVE_LISTENING,SOUND_SETTINGS,SUPPORTS_LOCALE_SWITCH,GOLDFISH,REMINDERS,DIALOG_INTERFACE_VERSION,SPEECH_RECOGNIZER_USS,I_HEART_RADIO,SET_LOCALE,TIMERS_AND_ALARMS,EARCONS) 2023-04-09 21:02:41.868 - info: alexa2.0 (26960) No smart home devices to query 2023-04-09 21:02:44.026 - info: alexa2.0 (26960) Subscribing to states... 2023-04-09 21:02:44.032 - info: alexa2.0 (26960) Deleting the following states: ["Echo-Devices.G070L81484841U54.Preferences.defaultAlarmNotificationSound"] 2023-04-09 21:02:46.303 - info: alexa2.0 (26960) Alexa-Push-Connection disconnected - retry: Retry Connection in 10s 2023-04-09 21:02:56.825 - info: alexa2.0 (26960) Alexa-Push-Connection disconnected - retry: Retry Connection in 15s 2023-04-09 21:03:11.843 - info: alexa2.0 (26960) Initialization Done ... 2023-04-09 21:03:12.437 - info: alexa2.0 (26960) Alexa-Push-Connection disconnected - retry: Retry Connection in 20s============ Mark until here for C&P =============
-
Hallo, wenn ich etwas über NPM installieren möchte sagt er immer, dass ich "npm audit fix --force" ausführen soll
Nach der Ausführug kommt aber immer nur das hier:
# npm audit report lodash <=4.17.20 Severity: critical Regular Expression Denial of Service (ReDoS) in lodash - https://github.com/advisories/GHSA-x5rq-j2xg-h7qm Prototype Pollution in lodash - https://github.com/advisories/GHSA-4xc9-xhrj-v574 Prototype Pollution in lodash - https://github.com/advisories/GHSA-fvqr-27wr-82fm Regular Expression Denial of Service (ReDoS) in lodash - https://github.com/advisories/GHSA-29mw-wpgm-hmr9 Prototype Pollution in lodash - https://github.com/advisories/GHSA-jf85-cpcp-j695 Command Injection in lodash - https://github.com/advisories/GHSA-35jh-r3h4-6jhm Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw fix available via `npm audit fix --force` Will install iobroker.knx@2.0.18, which is a breaking change node_modules/machina/node_modules/lodash node_modules/xml2js-xpath/node_modules/lodash machina 0.3.7 - 2.0.2 Depends on vulnerable versions of lodash node_modules/machina iobroker.knx <=0.8.6 Depends on vulnerable versions of machina Depends on vulnerable versions of xml2js Depends on vulnerable versions of xml2js-xpath node_modules/iobroker.knx xml2js-xpath <=0.9.0 Depends on vulnerable versions of lodash node_modules/xml2js-xpath xml2js <=0.4.23 Severity: high xml2js is vulnerable to prototype pollution - https://github.com/advisories/GHSA-776f-qx25-q3cc fix available via `npm audit fix --force` Will install iobroker.knx@2.0.18, which is a breaking change node_modules/iobroker.knx/node_modules/xml2js 5 vulnerabilities (4 high, 1 critical) To address all issues (including breaking changes), run: npm audit fix --forceAb und zu kommen 5 vulnerabilities, manchmal nur 4. Aber weg gehen sie nicht...
Außerdem frage ich mich, wieso er KNX <=0.8.6 bemängelt, obwohl ich 2.0.13 installiert habe!
@loverz sagte in NPM AUDIT FIX?:
npm audit fix
ist eigentlich nur für den package verwalter/maintainer gedacht. dadurch kann er sich pakete aktualisieren lassen, die sein eigenes programm/package verwendet, welche security probleme haben.
da man sich dadurch aber inkonsistenzen reinholen kann und man danach ausführlich sein system testen muss, ist das nicht für den normalnutzer gedacht -
@thomas-braun sagte in NPM AUDIT FIX?:
@loverz sagte in NPM AUDIT FIX?:
Mache gleich mal ein Fix
Gib mal die Ausgabe vom
iob diagdanach. Da scheint mir noch mehr krumm zu sein.@Glasfaser
======== Start marking the full check here =========Skript v.2023-04-02 *** BASE SYSTEM *** Model : Raspberry Pi 4 Model B Rev 1.2 Architecture : armv7l Docker : false Virtualization : none Distributor ID: Raspbian Description: Raspbian GNU/Linux 10 (buster) Release: 10 Codename: buster PRETTY_NAME="Raspbian GNU/Linux 10 (buster)" NAME="Raspbian GNU/Linux" VERSION_ID="10" VERSION="10 (buster)" VERSION_CODENAME=buster ID=raspbian ID_LIKE=debian HOME_URL="http://www.raspbian.org/" SUPPORT_URL="http://www.raspbian.org/RaspbianForums" BUG_REPORT_URL="http://www.raspbian.org/RaspbianBugs" Systemuptime and Load: 21:02:19 up 9 days, 22:30, 1 user, load average: 4.32, 3.95, 4.36 CPU threads: 4 *** Time and Time Zones *** Local time: Sun 2023-04-09 21:02:19 CEST Universal time: Sun 2023-04-09 19:02:19 UTC RTC time: n/a Time zone: Europe/Berlin (CEST, +0200) System clock synchronized: yes NTP service: active RTC in local TZ: no *** User and Groups *** pi /home/pi pi adm dialout cdrom sudo audio video plugdev games users input netdev gpio i2c spi iobroker *** X-Server-Setup *** X-Server: false Desktop: Terminal: tty Boot Target: graphical.target *** MEMORY *** total used free shared buff/cache available Mem: 3.9G 1.7G 756M 28M 1.5G 2.3G Swap: 511M 161M 350M Total: 4.4G 1.8G 1.1G 3888 M total memory 1651 M used memory 558 M active memory 2381 M inactive memory 756 M free memory 271 M buffer memory 1209 M swap cache 511 M total swap 161 M used swap 350 M free swap *** FILESYSTEM *** Filesystem Type Size Used Avail Use% Mounted on /dev/root ext4 118G 16G 97G 14% / devtmpfs devtmpfs 1.8G 0 1.8G 0% /dev tmpfs tmpfs 1.9G 0 1.9G 0% /dev/shm tmpfs tmpfs 1.9G 58M 1.9G 3% /run tmpfs tmpfs 5.0M 4.0K 5.0M 1% /run/lock tmpfs tmpfs 1.9G 0 1.9G 0% /sys/fs/cgroup /dev/mmcblk0p1 vfat 253M 49M 204M 20% /boot tmpfs tmpfs 389M 0 389M 0% /run/user/1000 Messages concerning ext4 filesystem in dmesg: [Thu Mar 30 22:31:53 2023] Kernel command line: coherent_pool=1M 8250.nr_uarts=1 snd_bcm2835.enable_compat_alsa=0 snd_bcm2835.enable_hdmi=1 smsc95xx.macaddr=DC:A6:32:86:53:AE vc_mem.mem_base=0x3f000000 vc_mem.mem_size=0x3f600000 dwc_otg.lpm_enable=0 console=tty1 root=PARTUUID=52e4cf4c-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait [Thu Mar 30 22:31:54 2023] EXT4-fs (mmcblk0p2): mounted filesystem with ordered data mode. Opts: (null) [Thu Mar 30 22:31:54 2023] VFS: Mounted root (ext4 filesystem) readonly on device 179:2. [Thu Mar 30 22:31:56 2023] EXT4-fs (mmcblk0p2): re-mounted. Opts: commit=600 Show mounted filesystems (real ones only): TARGET SOURCE FSTYPE OPTIONS / /dev/mmcblk0p2 ext4 rw,noatime,commit=600 |-/sys/fs/bpf none bpf rw,nosuid,nodev,noexec,relatime,mode=700 `-/boot /dev/mmcblk0p1 vfat rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=ascii,shortname=mixed,errors=remount-ro Files in neuralgic directories: /var: 3.8G /var/ 2.9G /var/cache/apt 2.9G /var/cache 2.8G /var/cache/apt/archives 399M /var/lib /opt/iobroker/backups: 3.6G /opt/iobroker/backups/ /opt/iobroker/iobroker-data: 402M /opt/iobroker/iobroker-data/ 183M /opt/iobroker/iobroker-data/files 147M /opt/iobroker/iobroker-data/backup-objects 72M /opt/iobroker/iobroker-data/files/telegram.admin 51M /opt/iobroker/iobroker-data/files/javascript.admin The five largest files in iobroker-data are: 20M /opt/iobroker/iobroker-data/objects.jsonl 15M /opt/iobroker/iobroker-data/files/telegram.admin/rules/static/js/vendors-node_modules_iobroker_adapter-react-v5_assets_devices_parseNames_d_ts-node_modules_io-1d9f06.44fe4a3f.chunk.js.map 14M /opt/iobroker/iobroker-data/objects.json.migrated 14M /opt/iobroker/iobroker-data/objects.json.bak.migrated 13M /opt/iobroker/iobroker-data/objects.json.old *** NodeJS-Installation *** /usr/bin/nodejs v16.19.1 /usr/bin/node v16.19.1 /usr/bin/npm 8.19.3 /usr/bin/npx 8.19.3 nodejs: Installed: 16.19.1-deb-1nodesource1 Candidate: 16.19.1-deb-1nodesource1 Version table: *** 16.19.1-deb-1nodesource1 500 500 https://deb.nodesource.com/node_16.x buster/main armhf Packages 100 /var/lib/dpkg/status 10.24.0~dfsg-1~deb10u3 500 500 http://raspbian.raspberrypi.org/raspbian buster/main armhf Packages Temp directories causing npm8 problem: 0 No problems detected *** ioBroker-Installation *** ioBroker Status iobroker is running on this host. Objects type: jsonl States type: jsonl Core adapters versions js-controller: 4.0.24 admin: 6.3.5 javascript: 6.1.4 npm ERR! code ELSPROBLEMS npm ERR! extraneous: @types/caseless@0.12.2 /opt/iobroker/node_modules/@types/caseless npm ERR! extraneous: @types/request@2.48.8 /opt/iobroker/node_modules/@types/request npm ERR! extraneous: @types/tough-cookie@4.0.2 /opt/iobroker/node_modules/@types/tough-cookie npm ERR! extraneous: coffeescript@1.12.7 /opt/iobroker/node_modules/coffeescript npm ERR! invalid: iobroker.sourceanalytix@0.4.14 /opt/iobroker/node_modules/iobroker.sourceanalytix npm ERR! invalid: iobroker.yahka@1.0.3 /opt/iobroker/node_modules/iobroker.yahka npm ERR! extraneous: jsonata@1.8.6 /opt/iobroker/node_modules/jsonata npm ERR! extraneous: node-inspect@2.0.0 /opt/iobroker/node_modules/node-inspect npm ERR! extraneous: suncalc2@1.8.1 /opt/iobroker/node_modules/suncalc2 npm ERR! extraneous: typescript@4.7.4 /opt/iobroker/node_modules/typescript npm ERR! extraneous: virtual-tsc@0.6.2 /opt/iobroker/node_modules/virtual-tsc npm ERR! A complete log of this run can be found in: npm ERR! /home/pi/.npm/_logs/2023-04-09T19_02_36_936Z-debug-0.log Adapters from github: 2 Adapter State + system.adapter.admin.0 : admin : Host-ioBroker - enabled, port: 8081, bind: 0.0.0.0, run as: admin + system.adapter.alexa2.0 : alexa2 : Host-ioBroker - enabled + system.adapter.backitup.0 : backitup : Host-ioBroker - enabled system.adapter.daswetter.0 : daswetter : Host-ioBroker - enabled + system.adapter.deconz.0 : deconz : Host-ioBroker - enabled, port: 80 system.adapter.easee.0 : easee : Host-ioBroker - disabled system.adapter.hmip.0 : hmip : Host-ioBroker - disabled + system.adapter.hs100.0 : hs100 : Host-ioBroker - enabled + system.adapter.hue.0 : hue : Host-ioBroker - enabled, port: 443 + system.adapter.influxdb.0 : influxdb : Host-ioBroker - enabled, port: 8086 + system.adapter.info.0 : info : Host-ioBroker - enabled + system.adapter.javascript.0 : javascript : Host-ioBroker - enabled + system.adapter.km200.0 : km200 : Host-ioBroker - enabled + system.adapter.knx.0 : knx : Host-ioBroker - enabled, bind: 192.168.1.166 system.adapter.mydlink.0 : mydlink : Host-ioBroker - disabled system.adapter.netatmo-crawler.0 : netatmo-crawler : Host-ioBroker - enabled + system.adapter.philips-tv.0 : philips-tv : Host-ioBroker - enabled + system.adapter.ping.0 : ping : Host-ioBroker - enabled + system.adapter.rpi2.0 : rpi2 : Host-ioBroker - enabled + system.adapter.shelly.0 : shelly : Host-ioBroker - enabled, port: 1882, bind: 192.168.1.166 system.adapter.solarmanpv.0 : solarmanpv : Host-ioBroker - enabled + system.adapter.sourceanalytix.0 : sourceanalytix : Host-ioBroker - enabled + system.adapter.telegram.0 : telegram : Host-ioBroker - enabled, port: 8443, bind: 0.0.0.0 + system.adapter.telegram.1 : telegram : Host-ioBroker - enabled, port: 8443, bind: 0.0.0.0 + system.adapter.yahka.0 : yahka : Host-ioBroker - enabled + system.adapter.yahka.3 : yahka : Host-ioBroker - enabled system.adapter.yeelight-2.0 : yeelight-2 : Host-ioBroker - disabled + instance is alive Enabled adapters with bindings + system.adapter.admin.0 : admin : Host-ioBroker - enabled, port: 8081, bind: 0.0.0.0, run as: admin + system.adapter.deconz.0 : deconz : Host-ioBroker - enabled, port: 80 + system.adapter.hue.0 : hue : Host-ioBroker - enabled, port: 443 + system.adapter.influxdb.0 : influxdb : Host-ioBroker - enabled, port: 8086 + system.adapter.shelly.0 : shelly : Host-ioBroker - enabled, port: 1882, bind: 192.168.1.166 + system.adapter.telegram.0 : telegram : Host-ioBroker - enabled, port: 8443, bind: 0.0.0.0 + system.adapter.telegram.1 : telegram : Host-ioBroker - enabled, port: 8443, bind: 0.0.0.0 ioBroker-Repositories stable : http://download.iobroker.net/sources-dist.json beta : http://download.iobroker.net/sources-dist-latest.json latest : http://iobroker.live/repo/sources-dist-latest.json Active repo(s): stable Installed ioBroker-Instances Used repository: stable Adapter "admin" : 6.3.5 , installed 6.3.5 Adapter "alexa2" : 3.23.2 , installed 3.23.2 Adapter "backitup" : 2.6.16 , installed 2.5.12 [Updatable] Adapter "daswetter" : 3.1.7 , installed 3.1.7 Adapter "deconz" : 1.3.21 , installed 1.3.21 Adapter "easee" : 1.0.7 , installed 1.0.7 Adapter "hmip" : 1.20.0 , installed 1.20.0 Adapter "hs100" : 2.1.2 , installed 2.1.2 Adapter "hue" : 3.7.1 , installed 3.7.1 Adapter "influxdb" : 3.2.0 , installed 3.2.0 Adapter "info" : 1.9.19 , installed 1.9.19 Adapter "javascript" : 6.1.4 , installed 6.1.4 Controller "js-controller": 4.0.24 , installed 4.0.24 Adapter "km200" : 2.0.3 , installed 2.0.3 Adapter "knx" : 2.0.17 , installed 2.0.18 Adapter "mydlink" : 1.1.12 , installed 1.2.1 Adapter "netatmo-crawler": 0.8.1 , installed 0.8.1 Adapter "philips-tv" : 0.5.3 , installed 0.5.3 Adapter "ping" : 1.5.3 , installed 1.5.3 Adapter "rpi2" : 1.3.2 , installed 1.3.2 Adapter "shelly" : 6.3.1 , installed 6.3.1 Adapter "solarmanpv" : 0.3.2 , installed 0.3.2 Adapter "telegram" : 1.15.2 , installed 1.15.2 Adapter "yahka" : 0.17.0 , installed 1.0.3 Adapter "yeelight-2" : 1.1.2 , installed 1.2.1 Objects and States Please stand by - This may take a while Objects: 10649 States: 9196 *** OS-Repositories and Updates *** Hit:1 http://phoscon.de/apt/deconz buster InRelease Hit:2 http://raspbian.raspberrypi.org/raspbian buster InRelease Hit:3 https://repos.influxdata.com/debian stretch InRelease Hit:4 https://packages.grafana.com/oss/deb stable InRelease Hit:5 http://archive.raspberrypi.org/debian buster InRelease Hit:6 https://deb.nodesource.com/node_16.x buster InRelease Hit:7 https://repo.homebridge.io stable InRelease Reading package lists... Pending Updates: 8 *** Listening Ports *** Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1000 18151 329/deCONZ tcp 0 0 127.0.0.1:45203 0.0.0.0:* LISTEN 1001 37357329 27699/io.yahka.0 tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 17042 724/sshd tcp 0 0 127.0.0.1:40471 0.0.0.0:* LISTEN 1001 37358987 27825/io.yahka.3 tcp 0 0 127.0.0.1:8088 0.0.0.0:* LISTEN 999 15030 715/influxd tcp 0 0 127.0.0.1:37529 0.0.0.0:* LISTEN 1001 37356391 27825/io.yahka.3 tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 1000 15429 329/deCONZ tcp 0 0 127.0.0.1:46237 0.0.0.0:* LISTEN 110 22065772 26253/homebridge tcp 0 0 0.0.0.0:45667 0.0.0.0:* LISTEN 1001 37358314 27699/io.yahka.0 tcp 0 0 0.0.0.0:33987 0.0.0.0:* LISTEN 1001 37358946 27825/io.yahka.3 tcp 0 0 127.0.0.1:44003 0.0.0.0:* LISTEN 110 37122721 26253/homebridge tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 1001 37351791 26616/iobroker.js-c tcp 0 0 127.0.0.1:9001 0.0.0.0:* LISTEN 1001 37350710 26616/iobroker.js-c tcp 0 0 127.0.0.1:44015 0.0.0.0:* LISTEN 1001 37357336 27699/io.yahka.0 tcp 0 0 127.0.0.1:33487 0.0.0.0:* LISTEN 110 30844253 26253/homebridge tcp6 0 0 :::8081 :::* LISTEN 1001 37349193 26658/io.admin.0 tcp6 0 0 :::51442 :::* LISTEN 110 22066377 26253/homebridge tcp6 0 0 :::8086 :::* LISTEN 999 15257 715/influxd tcp6 0 0 :::22 :::* LISTEN 0 17044 724/sshd tcp6 0 0 :::3000 :::* LISTEN 109 18727 709/grafana tcp6 0 0 :::8581 :::* LISTEN 110 16144 1285/hb-service udp 0 0 192.168.1.166:51103 0.0.0.0:* 1001 37362469 27037/io.knx.0 udp 0 0 0.0.0.0:1982 0.0.0.0:* 110 22066375 26253/homebridge udp 0 0 0.0.0.0:5683 0.0.0.0:* 1001 37352880 26913/io.shelly.0 udp 0 0 0.0.0.0:32831 0.0.0.0:* 108 14734 340/avahi-daemon: r udp 0 0 0.0.0.0:68 0.0.0.0:* 0 16583 706/dhcpcd udp 0 0 0.0.0.0:5353 0.0.0.0:* 110 20695 1285/hb-service udp 0 0 0.0.0.0:5353 0.0.0.0:* 108 14732 340/avahi-daemon: r udp 0 0 192.168.1.166:37733 0.0.0.0:* 1001 37351127 27037/io.knx.0 udp 0 0 0.0.0.0:1900 0.0.0.0:* 1001 37354334 27260/io.deconz.0 udp 0 0 0.0.0.0:1900 0.0.0.0:* 1000 15432 329/deCONZ udp6 0 0 :::546 :::* 0 2341956 706/dhcpcd udp6 0 0 :::5353 :::* 108 14733 340/avahi-daemon: r udp6 0 0 :::47388 :::* 108 14735 340/avahi-daemon: r udp6 0 0 :::1900 :::* 1001 37354337 27260/io.deconz.0 udp6 0 0 :::1900 :::* 1001 37354336 27260/io.deconz.0 udp6 0 0 :::1900 :::* 1001 37354335 27260/io.deconz.0 *** Log File - Last 25 Lines *** 2023-04-09 21:01:46.004 - warn: km200.0 (27476) This object will not be created in future versions. Please report this to the developer. 2023-04-09 21:01:46.087 - warn: km200.0 (27476) Object system.holidayModes.hm5.hcMode is invalid: obj.common.states has an invalid type! Expected "object", received "string" 2023-04-09 21:01:46.087 - warn: km200.0 (27476) This object will not be created in future versions. Please report this to the developer. 2023-04-09 21:01:46.768 - warn: km200.0 (27476) Object system.systemType is invalid: obj.common.states has an invalid type! Expected "object", received "string" 2023-04-09 21:01:46.769 - warn: km200.0 (27476) This object will not be created in future versions. Please report this to the developer. 2023-04-09 21:01:46.874 - info: km200.0 (27476) KM200 found 122 states, get their values now. 2023-04-09 21:01:46.889 - info: km200.0 (27476) Interval=30 min, Norm-list: dhwCircuits.dhw1.charge,dhwCircuits.dhw1.chargeDuration,dhwCircuits.dhw1.holidayMode.activated,dhwCircuits.dhw1.operationMode,dhwCircuits.dhw1.singleChargeSetpoint,dhwCircuits.dhw1.status,dhwCircuits.dhw1.temperatureLevels.high,dhwCircuits.dhw1.temperatureLevels.off,dhwCircuits.dhw1.waterFlow,dhwCircuits.dhw1.workingTime,heatSources.CHpumpModulation,heatSources.ChimneySweeper,heatSources.actualCHPower,heatSources.actualDHWPower,heatSources.applianceSupplyTemperature,heatSources.burnerModulationSetpoint,heatSources.burnerPowerSetpoint,heatSources.energyMonitoring.consumption,heatSources.energyMonitoring.correctionFactor,heatSources.energyMonitoring.maxTankLevel,heatSources.energyMonitoring.minTankLevel,heatSources.energyMonitoring.startDateTime,heatSources.energyMonitoring.tankLevel,heatSources.fanSpeed_setpoint,heatSources.gasAirPressure,heatSources.hs1.info,heatSources.hs1.type,heatSources.info,heatSources.nominalCHPower,heatSources.nominalDHWPower,heatSources.numberOfStarts,heatSources.powerSetpoint,heatSources.returnTemperature,heatSources.systemPressure,heatSources.workingTime.centralHeating,heatSources.workingTime.secondBurner,heatSources.workingTime.totalSystem,heatingCircuits.hc1.activeSwitchProgram,heatingCircuits.hc1.currentRoomSetpoint,heatingCircuits.hc1.currentSuWiMode,heatingCircuits.hc1.fastHeatupFactor,heatingCircuits.hc1.holidayMode.activated,heatingCircuits.hc1.operationMode,heatingCircuits.hc1.status,heatingCircuits.hc1.suWiSwitchMode,heatingCircuits.hc1.suWiThreshold,heatingCircuits.hc1.switchProgramMode,heatingCircuits.hc1.switchPrograms.A,heatingCircuits.hc1.switchPrograms.B,heatingCircuits.hc1.temperatureLevels.comfort2,heatingCircuits.hc1.temperatureLevels.eco,heatingCircuits.hc1.temporaryRoomSetpoint,notifications,recordings.dhwCircuits.dhw1.actualTemp._Hours,recordings.heatSources.actualCHPower._Hours,recordings.heatSources.actualDHWPower._Hours,recordings.heatSources.actualPower._Hours,recordings.heatSources.hs1.actualPower._Hours,recordings.heatingCircuits.hc1.roomtemperature._Hours,recordings.system.heatSources.hs1.actualPower._Hours,recordings.system.sensors.temperatures.outdoor_t1._Hours,system.brand,system.bus,system.healthStatus,system.holidayModes.hm1.assignedTo,system.holidayModes.hm1.dhwMode,system.holidayModes.hm1.hcMode,system.holidayModes.hm1.startStop,system.holidayModes.hm2.assignedTo,system.holidayModes.hm2.dhwMode,system.holidayModes.hm2.hcMode,system.holidayModes.hm2.startStop,system.holidayModes.hm3.assignedTo,system.holidayModes.hm3.dhwMode,system.holidayModes.hm3.hcMode,system.holidayModes.hm3.startStop,system.holidayModes.hm4.assignedTo,system.holidayModes.hm4.dhwMode,system.holidayModes.hm4.hcMode,system.holidayModes.hm4.startStop,system.holidayModes.hm5.assignedTo,system.holidayModes.hm5.dhwMode,system.holidayModes.hm5.hcMode,system.holidayModes.hm5.startStop,system.info,system.minOutdoorTemp,system.systemType 2023-04-09 21:01:46.890 - info: km200.0 (27476) Fast Interval=1 min, Fast-List: dhwCircuits.dhw1.actualTemp,dhwCircuits.dhw1.currentSetpoint,heatSources.actualModulation,heatSources.actualPower,heatSources.actualSupplyTemperature,heatSources.flameStatus,heatSources.hs1.actualModulation,heatSources.hs1.actualPower,heatSources.hs1.flameStatus,heatSources.supplyTemperatureSetpoint,heatingCircuits.hc1.actualSupplyTemperature,heatingCircuits.hc1.pumpModulation,heatingCircuits.hc1.supplyTemperatureSetpoint,system.appliance.actualSupplyTemperature,system.sensors.temperatures.hotWater_t2,system.sensors.temperatures.outdoor_t1,system.sensors.temperatures.return,system.sensors.temperatures.supply_t1,system.sensors.temperatures.supply_t1_setpoint 2023-04-09 21:01:46.891 - info: km200.0 (27476) Slow Interval=6 hours, Slow-List: recordings.dhwCircuits.dhw1.actualTemp._Days,recordings.dhwCircuits.dhw1.actualTemp._Months,recordings.heatSources.actualCHPower._Days,recordings.heatSources.actualCHPower._Months,recordings.heatSources.actualDHWPower._Days,recordings.heatSources.actualDHWPower._Months,recordings.heatSources.actualPower._Days,recordings.heatSources.actualPower._Months,recordings.heatSources.hs1.actualPower._Days,recordings.heatSources.hs1.actualPower._Months,recordings.heatingCircuits.hc1.roomtemperature._Days,recordings.heatingCircuits.hc1.roomtemperature._Months,recordings.system.heatSources.hs1.actualPower._Days,recordings.system.heatSources.hs1.actualPower._Months,recordings.system.sensors.temperatures.outdoor_t1._Days,recordings.system.sensors.temperatures.outdoor_t1._Months 2023-04-09 21:02:16.083 - info: km200.0 (27476) Set km200.0.heatingCircuits.hc1.activeSwitchProgram to 0 2023-04-09 21:02:17.519 - info: km200.0 (27476) Adapter km200 initialization finished with 122 states. 2023-04-09 21:02:18.093 - info: km200.0 (27476) Update {'heatingCircuits.hc1.activeSwitchProgram': {type: 'state',id: 'heatingCircuits.hc1.activeSwitchProgram',common: {id: 'heatingCircuits.hc1.activeSwitchProgram',name: 'heatingCircuits.hc1.activeSwitchProgram',type: 'number',unit: '',read: true,write: true,role: 'level',states: '0:A;1:B',min: 0,max: 1,native: [Object]},native: { km200: [Object] }}} 2023-04-09 21:02:32.156 - info: alexa2.0 (26960) Unknown Device, but enabling commands, Try it and report back if commands work. 2023-04-09 21:02:32.157 - info: alexa2.0 (26960) Report to developer as GitHub issue with details for device. Please grab full next line pot. from logfile on disk if cutted 2023-04-09 21:02:32.157 - info: alexa2.0 (26960) Device-type:AH6MYEHSW61SM - Sebastian's L67 (L67) (MULTI_WAKEWORDS_SUPPORTED,VOLUME_SETTING,SLEEP,DREAM_TRAINING,APPLE_MUSIC,AMAZON_MUSIC,KINDLE_BOOKS,ASCENDING_ALARM_VOLUME,CHANGE_NAME,MICROPHONE,TUNE_IN,MUSIC_SKILL,PERSISTENT_CONNECTION,TIDAL,TOUCH_INITIATED,SUPPORTS_LOCALE,DEEZER,DEREGISTER_DEVICE,AUDIBLE,CUSTOM_ALARM_TONE,SUPPORTS_CONNECTED_HOME_CLOUD_ONLY,SIRIUSXM,SET_TIME_ZONE,AUDIO_PLAYER,ADAPTIVE_LISTENING,SOUND_SETTINGS,SUPPORTS_LOCALE_SWITCH,GOLDFISH,REMINDERS,DIALOG_INTERFACE_VERSION,SPEECH_RECOGNIZER_USS,I_HEART_RADIO,SET_LOCALE,TIMERS_AND_ALARMS,EARCONS) 2023-04-09 21:02:41.868 - info: alexa2.0 (26960) No smart home devices to query 2023-04-09 21:02:44.026 - info: alexa2.0 (26960) Subscribing to states... 2023-04-09 21:02:44.032 - info: alexa2.0 (26960) Deleting the following states: ["Echo-Devices.G070L81484841U54.Preferences.defaultAlarmNotificationSound"] 2023-04-09 21:02:46.303 - info: alexa2.0 (26960) Alexa-Push-Connection disconnected - retry: Retry Connection in 10s 2023-04-09 21:02:56.825 - info: alexa2.0 (26960) Alexa-Push-Connection disconnected - retry: Retry Connection in 15s 2023-04-09 21:03:11.843 - info: alexa2.0 (26960) Initialization Done ... 2023-04-09 21:03:12.437 - info: alexa2.0 (26960) Alexa-Push-Connection disconnected - retry: Retry Connection in 20s============ Mark until here for C&P =============
@loverz sagte in NPM AUDIT FIX?:
buster
Beerdigen, ist verstorben.
Installier da den Nachfolger Debian 11 / Bullseye -
@loverz sagte in NPM AUDIT FIX?:
npm audit fix
ist eigentlich nur für den package verwalter/maintainer gedacht. dadurch kann er sich pakete aktualisieren lassen, die sein eigenes programm/package verwendet, welche security probleme haben.
da man sich dadurch aber inkonsistenzen reinholen kann und man danach ausführlich sein system testen muss, ist das nicht für den normalnutzer gedacht -
Die Adapter nochmal installieren, da klemmt es:
npm ERR! invalid: iobroker.sourceanalytix@0.4.14 /opt/iobroker/node_modules/iobroker.sourceanalytix npm ERR! invalid: iobroker.yahka@1.0.3 /opt/iobroker/node_modules/iobroker.yahka -
@loverz sagte in NPM AUDIT FIX?:
buster
Beerdigen, ist verstorben.
Installier da den Nachfolger Debian 11 / Bullseye@thomas-braun heißt?
Geht das nicht viasudo apt-get update && sudo apt-get upgrade -y?
Das führe ich regelmäßig aus.
Würde gerne mal eine komplette Neuinstallation machen und danach mein Backitup einspielen, aber das klappt bei mir nicht, hab das mal mit nem zweiten Raspberry probiert.
-
Die Adapter nochmal installieren, da klemmt es:
npm ERR! invalid: iobroker.sourceanalytix@0.4.14 /opt/iobroker/node_modules/iobroker.sourceanalytix npm ERR! invalid: iobroker.yahka@1.0.3 /opt/iobroker/node_modules/iobroker.yahka@thomas-braun sagte in NPM AUDIT FIX?:
Die Adapter nochmal installieren, da klemmt es:
Einfach "drüberbügeln"?
Oder vorher löschen? Dann wären halt meine Einstellungen von YAHKA weg! -
@thomas-braun heißt?
Geht das nicht viasudo apt-get update && sudo apt-get upgrade -y?
Das führe ich regelmäßig aus.
Würde gerne mal eine komplette Neuinstallation machen und danach mein Backitup einspielen, aber das klappt bei mir nicht, hab das mal mit nem zweiten Raspberry probiert.
@loverz sagte in NPM AUDIT FIX?:
Das führe ich regelmäßig aus.
Damit bleibst du immer in einem Release.
Ein Releasewechsel muss/kann so vorgenommen werden:https://forum.iobroker.net/topic/47214/upgrade-von-debian-10-buster-auf-11-bullseye
-
@thomas-braun heißt?
Geht das nicht viasudo apt-get update && sudo apt-get upgrade -y?
Das führe ich regelmäßig aus.
Würde gerne mal eine komplette Neuinstallation machen und danach mein Backitup einspielen, aber das klappt bei mir nicht, hab das mal mit nem zweiten Raspberry probiert.
@loverz sagte in NPM AUDIT FIX?:
aber das klappt bei mir nicht
Dann ist dein System krumm. Das klappt nämlich bei 'ordentlichen' Installationen.
-
@loverz sagte in NPM AUDIT FIX?:
aber das klappt bei mir nicht
Dann ist dein System krumm. Das klappt nämlich bei 'ordentlichen' Installationen.
@thomas-braun hab eine neue SD genommen und eine Neuinstallation gemacht.
Die Backups laufen einwandfrei durch. Weiß echt nicht, woran das liegt :(Danke für die Anleitung. Ich denke, wenn ich das Backup-Problem löse, dann kann ich damit auch gleich auf ein neues Release und eine saubere Neuinstallation umziehen.
-
@thomas-braun hab eine neue SD genommen und eine Neuinstallation gemacht.
Die Backups laufen einwandfrei durch. Weiß echt nicht, woran das liegt :(Danke für die Anleitung. Ich denke, wenn ich das Backup-Problem löse, dann kann ich damit auch gleich auf ein neues Release und eine saubere Neuinstallation umziehen.
Hab noch eine Kinke gefunden:
https://repos.influxdata.com/debian stretch InReleaseMuss auf buster lauten, bzw. nach dem erfolgten Upgrade natürlich auf 'bullseye'.
-
Hab noch eine Kinke gefunden:
https://repos.influxdata.com/debian stretch InReleaseMuss auf buster lauten, bzw. nach dem erfolgten Upgrade natürlich auf 'bullseye'.
@thomas-braun was meinst du damit? Dass ich Influx nach dem Upgrade auf Bullseye abändern muss?
Soll ich die beiden fehlerhaften Adapter "drüberbügeln"?
-
@thomas-braun was meinst du damit? Dass ich Influx nach dem Upgrade auf Bullseye abändern muss?
Soll ich die beiden fehlerhaften Adapter "drüberbügeln"?
@loverz sagte in NPM AUDIT FIX?:
Dass ich Influx nach dem Upgrade auf Bullseye abändern muss?
Ich würde es jetzt (im file /etc/apt/sources.list.d/influxIRGENDWAS.list) auf buster ändern.
Wenn du nach meiner Anleitung zum Upgrade auf Bullseye vorgehst wird das dann gleich automatisch richtig gemacht.
929
Online32.6k
Benutzer81.9k
Themen1.3m
Beiträge