Bug 31017 - multipath-tools new security issues CVE-2022-4197[34]
Summary: multipath-tools new security issues CVE-2022-4197[34]
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2022-10-24 17:34 CEST by David Walser
Modified: 2024-03-18 17:13 CET (History)
4 users (show)

See Also:
Source RPM: multipath-tools-0.8.8-2.mga9.src.rpm
CVE: CVE-2022-41973, CVE-2022-41974
Status comment:


Attachments

Description David Walser 2022-10-24 17:34:48 CEST
Security issues in multipath-tools have been announced today (October 24):
https://www.openwall.com/lists/oss-security/2022/10/24/2

The message mentions that patches were sent to the (private) distros list, but I don't seem them attached to this message.  I guess they will be available upstream shortly.

Mageia 8 is also affected.
Comment 1 David Walser 2022-10-25 15:00:53 CEST
openSUSE has issued an advisory for this on October 24:
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APSADEAFW42LM3YIFLMFWKMKPGF667O4/
Comment 2 Lewis Smith 2022-10-26 09:12:43 CEST
No particular packager in sight for this, so assigning the update globally.
Having looked at the numerous Suse links, no sign of the patches in question.
"I guess they will be available upstream shortly"
Assigning this globally, awaiting this info.

Status: NEW => NEEDINFO
Assignee: bugsquad => pkg-bugs

David Walser 2022-10-26 15:10:02 CEST

Status: NEEDINFO => NEW

Comment 3 David Walser 2022-10-26 15:19:00 CEST
Let's not use NEEDINFO for that purpose, as it makes bugs disappear from Bugzilla searches.

It looks like the fix is related to the dracut/tmpfiles stuff in their SPEC:
https://build.opensuse.org/package/view_file/SUSE:SLE-15-SP4:Update/multipath-tools/multipath-tools.spec?expand=1

(diff against this to see the changes:
https://build.opensuse.org/package/view_file/SUSE:SLE-15-SP4:GA/multipath-tools/multipath-tools.spec?expand=1 )

I'm guessing it's changing TMPFILESDIR from something in /dev/shm to something in /run.  Also see the multipath-dracut.conf that was added.
Comment 4 David Walser 2022-10-26 16:04:56 CEST
RHEL also fixed the second CVE in a package called device-mapper-multipath.
Comment 5 David Walser 2022-11-10 23:48:25 CET
Fedora has issued an advisory for this today (November 10):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QIGZM5NOOMFDCITOLQEJNNX5SCRQLQVV/
Comment 6 David Walser 2022-11-14 17:43:17 CET
(In reply to David Walser from comment #4)
> RHEL also fixed the second CVE in a package called device-mapper-multipath.

and that fix had a regression, resulting in CVE-2022-3787:
https://access.redhat.com/errata/RHSA-2022:7928
Comment 7 David Walser 2022-11-20 18:02:09 CET
Ubuntu has issued an advisory for this on November 17:
https://ubuntu.com/security/notices/USN-5731-1
Comment 8 David Walser 2023-03-02 23:19:03 CET
Debian has issued an advisory for this on March 1:
https://www.debian.org/security/2023/dsa-5366
Comment 9 Nicolas Salguero 2024-03-15 14:58:49 CET
Suggested advisory:
========================

The updated packages fix security vulnerabilities:

multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root. (CVE-2022-41973)

multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR. (CVE-2022-41974)

References:
https://www.openwall.com/lists/oss-security/2022/10/24/2
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APSADEAFW42LM3YIFLMFWKMKPGF667O4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QIGZM5NOOMFDCITOLQEJNNX5SCRQLQVV/
https://access.redhat.com/errata/RHSA-2022:7928
https://ubuntu.com/security/notices/USN-5731-1
https://www.debian.org/security/2023/dsa-5366
========================

Updated packages in core/updates_testing:
========================
kpartx-0.8.8-2.1.mga9
lib(64)dmmp0-0.8.8-2.1.mga9
lib(64)dmmp-devel-0.8.8-2.1.mga9
lib(64)mpathcmd0-0.8.8-2.1.mga9
lib(64)mpathpersist0-0.8.8-2.1.mga9
lib(64)mpathvalid0-0.8.8-2.1.mga9
lib(64)multipath0-0.8.8-2.1.mga9
lib(64)multipath-tools-devel-0.8.8-2.1.mga9
multipath-tools-0.8.8-2.1.mga9

from SRPM:
multipath-tools-0.8.8-2.1.mga9.src.rpm

CC: (none) => nicolas.salguero
Status: NEW => ASSIGNED
CVE: (none) => CVE-2022-41973, CVE-2022-41974
Assignee: pkg-bugs => qa-bugs
Version: Cauldron => 9

katnatek 2024-03-16 02:09:42 CET

Keywords: (none) => advisory

Comment 10 Len Lawrence 2024-03-16 20:43:59 CET
Had a look at this for mga9, x64 and had to admit defeat.  The tutorials on the basic elements were not very enlightening.  You have to step back when one acronym is explained in terms of a bunch of other acronyms, most of which are unfamiliar.

The packages do update cleanly though.

CC: (none) => tarazed25

katnatek 2024-03-17 02:21:09 CET

CC: (none) => andrewsfarm

Comment 11 katnatek 2024-03-17 02:32:05 CET
VM mageia 9 x86_64
Install current versions , update testing versions, remove packages

LC_ALL=C urpmi kpartx lib64dmmp0 lib64dmmp-devel lib64mpathcmd0 lib64mpathpersist0 lib64mpathvalid0 lib64multipath0 lib64multipath-tools-devel multipath-tools
Package kpartx-0.8.8-2.mga9.x86_64 is already installed
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release")
  lib64aio-devel                 0.3.113      1.mga9        x86_64  
  lib64cap-devel                 2.52         5.mga9        x86_64  
  lib64devmapper-devel           1.02.185     1.mga9        x86_64  
  lib64dmmp-devel                0.8.8        2.mga9        x86_64  
  lib64dmmp0                     0.8.8        2.mga9        x86_64  
  lib64gcrypt-devel              1.10.2       2.mga9        x86_64  
  lib64gpg-error-devel           1.47         1.mga9        x86_64  
  lib64json-c-devel              0.16         1.mga9        x86_64  
  lib64lz4-devel                 1.9.4        1.mga9        x86_64  
  lib64lzma-devel                5.4.3        1.mga9        x86_64  
  lib64mpathcmd0                 0.8.8        2.mga9        x86_64  
  lib64mpathpersist0             0.8.8        2.mga9        x86_64  
  lib64mpathvalid0               0.8.8        2.mga9        x86_64  
  lib64multipath-tools-devel     0.8.8        2.mga9        x86_64  
  lib64multipath0                0.8.8        2.mga9        x86_64  
  lib64urcu-devel                0.13.2       1.mga9        x86_64  
  lib64xcrypt-devel              4.4.33       3.mga9        x86_64  
  lib64zstd-devel                1.5.5        1.mga9        x86_64  
  libcap-utils                   2.52         5.mga9        x86_64  
  multipath-tools                0.8.8        2.mga9        x86_64  
(medium "Core Updates")
  glibc-devel                    2.36         52.mga9       x86_64  
  kernel-userspace-headers       6.6.18       1.mga9        x86_64  
  lib64udev-devel                253.16       1.mga9        x86_64  
  systemd-devel                  253.16       1.mga9        x86_64  
28MB of additional disk space will be used.
5.7MB of packages will be retrieved.
Proceed with the installation of the 24 packages? (Y/n) y


    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64devmapper-devel-1.02.185-1.mga9.x86_64.rpm
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64json-c-devel-0.16-1.mga9.x86_64.rpm           
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64mpathpersist0-0.8.8-2.mga9.x86_64.rpm         
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64gcrypt-devel-1.10.2-2.mga9.x86_64.rpm         
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64lz4-devel-1.9.4-1.mga9.x86_64.rpm             
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64aio-devel-0.3.113-1.mga9.x86_64.rpm           
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64mpathvalid0-0.8.8-2.mga9.x86_64.rpm           
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64lzma-devel-5.4.3-1.mga9.x86_64.rpm            
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64urcu-devel-0.13.2-1.mga9.x86_64.rpm           
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64multipath-tools-devel-0.8.8-2.mga9.x86_64.rpm 
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/multipath-tools-0.8.8-2.mga9.x86_64.rpm            
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64xcrypt-devel-4.4.33-3.mga9.x86_64.rpm         
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64dmmp-devel-0.8.8-2.mga9.x86_64.rpm            
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64dmmp0-0.8.8-2.mga9.x86_64.rpm                 
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64cap-devel-2.52-5.mga9.x86_64.rpm              
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64gpg-error-devel-1.47-1.mga9.x86_64.rpm        
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/libcap-utils-2.52-5.mga9.x86_64.rpm                
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64mpathcmd0-0.8.8-2.mga9.x86_64.rpm             
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64zstd-devel-1.5.5-1.mga9.x86_64.rpm            
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/release/lib64multipath0-0.8.8-2.mga9.x86_64.rpm            
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/updates/lib64udev-devel-253.16-1.mga9.x86_64.rpm           
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/updates/systemd-devel-253.16-1.mga9.x86_64.rpm             
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/updates/glibc-devel-2.36-52.mga9.x86_64.rpm                
    https://mirrors.kernel.org/mageia/distrib/9/x86_64/media/core/updates/kernel-userspace-headers-6.6.18-1.mga9.x86_64.rpm  
installing glibc-devel-2.36-52.mga9.x86_64.rpm lib64dmmp-devel-0.8.8-2.mga9.x86_64.rpm lib64urcu-devel-0.13.2-1.mga9.x86_64.rpm lib64multipath-tools-devel-0.8.8-2.mga9.x86_64.rpm lib64json-c-devel-0.16-1.mga9.x86_64.rpm lib64mpathpersist0-0.8.8-2.mga9.x86_64.rpm lib64devmapper-devel-1.02.185-1.mga9.x86_64.rpm systemd-devel-253.16-1.mga9.x86_64.rpm lib64lz4-devel-1.9.4-1.mga9.x86_64.rpm lib64multipath0-0.8.8-2.mga9.x86_64.rpm lib64mpathcmd0-0.8.8-2.mga9.x86_64.rpm kernel-userspace-headers-6.6.18-1.mga9.x86_64.rpm libcap-utils-2.52-5.mga9.x86_64.rpm lib64dmmp0-0.8.8-2.mga9.x86_64.rpm lib64udev-devel-253.16-1.mga9.x86_64.rpm lib64gpg-error-devel-1.47-1.mga9.x86_64.rpm lib64xcrypt-devel-4.4.33-3.mga9.x86_64.rpm multipath-tools-0.8.8-2.mga9.x86_64.rpm lib64mpathvalid0-0.8.8-2.mga9.x86_64.rpm lib64lzma-devel-5.4.3-1.mga9.x86_64.rpm lib64gcrypt-devel-1.10.2-2.mga9.x86_64.rpm lib64aio-devel-0.3.113-1.mga9.x86_64.rpm lib64zstd-devel-1.5.5-1.mga9.x86_64.rpm lib64cap-devel-2.52-5.mga9.x86_64.rpm from /var/cache/urpmi/rpms
Preparing...                     ###########################################################################################
     1/24: lib64mpathcmd0        ###########################################################################################
     2/24: lib64multipath0       ###########################################################################################
     3/24: lib64mpathpersist0    ###########################################################################################
     4/24: multipath-tools       ###########################################################################################
     5/24: lib64dmmp0            ###########################################################################################
     6/24: lib64mpathvalid0      ###########################################################################################
     7/24: lib64zstd-devel       ###########################################################################################
     8/24: lib64aio-devel        ###########################################################################################
     9/24: lib64lzma-devel       ###########################################################################################
    10/24: lib64xcrypt-devel     ###########################################################################################
    11/24: lib64gpg-error-devel  ###########################################################################################
    12/24: lib64gcrypt-devel     ###########################################################################################
    13/24: libcap-utils          ###########################################################################################
    14/24: lib64cap-devel        ###########################################################################################
    15/24: lib64udev-devel       ###########################################################################################
    16/24: kernel-userspace-headers
                                 ###########################################################################################
    17/24: glibc-devel           ###########################################################################################
    18/24: lib64devmapper-devel  ###########################################################################################
    19/24: lib64lz4-devel        ###########################################################################################
    20/24: systemd-devel         ###########################################################################################
    21/24: lib64json-c-devel     ###########################################################################################
    22/24: lib64urcu-devel       ###########################################################################################
    23/24: lib64multipath-tools-devel
                                 ###########################################################################################
    24/24: lib64dmmp-devel       ###########################################################################################

LC_ALL=C urpmi --auto --auto-update
medium "QA Testing (64-bit)" is up-to-date
medium "Core Release" is up-to-date
medium "Core Updates" is up-to-date
medium "Nonfree Release" is up-to-date
medium "Nonfree Updates" is up-to-date
medium "Tainted Release" is up-to-date
medium "Tainted Updates" is up-to-date


installing lib64multipath0-0.8.8-2.1.mga9.x86_64.rpm lib64mpathvalid0-0.8.8-2.1.mga9.x86_64.rpm lib64dmmp-devel-0.8.8-2.1.mga9.x86_64.rpm lib64dmmp0-0.8.8-2.1.mga9.x86_64.rpm lib64multipath-tools-devel-0.8.8-2.1.mga9.x86_64.rpm multipath-tools-0.8.8-2.1.mga9.x86_64.rpm lib64mpathcmd0-0.8.8-2.1.mga9.x86_64.rpm lib64mpathpersist0-0.8.8-2.1.mga9.x86_64.rpm kpartx-0.8.8-2.1.mga9.x86_64.rpm from //home/qateam/qa-testing/x86_64
Preparing...                     ###########################################################################################
      1/9: lib64mpathcmd0        ###########################################################################################
      2/9: lib64multipath0       ###########################################################################################
      3/9: lib64mpathpersist0    ###########################################################################################
      4/9: lib64mpathvalid0      ###########################################################################################
      5/9: kpartx                ###########################################################################################
      6/9: multipath-tools       ###########################################################################################
      7/9: lib64dmmp0            ###########################################################################################
      8/9: lib64dmmp-devel       ###########################################################################################
      9/9: lib64multipath-tools-devel
                                 ###########################################################################################
      1/9: removing lib64multipath-tools-devel-0.8.8-2.mga9.x86_64
                                 ###########################################################################################
      2/9: removing lib64dmmp-devel-0.8.8-2.mga9.x86_64
                                 ###########################################################################################
      3/9: removing lib64dmmp0-0.8.8-2.mga9.x86_64
                                 ###########################################################################################
      4/9: removing multipath-tools-0.8.8-2.mga9.x86_64
                                 ###########################################################################################
      5/9: removing lib64mpathpersist0-0.8.8-2.mga9.x86_64
                                 ###########################################################################################
      6/9: removing lib64mpathvalid0-0.8.8-2.mga9.x86_64
                                 ###########################################################################################
      7/9: removing lib64multipath0-0.8.8-2.mga9.x86_64
                                 ###########################################################################################
      8/9: removing lib64mpathcmd0-0.8.8-2.mga9.x86_64
                                 ###########################################################################################
      9/9: removing kpartx-0.8.8-2.mga9.x86_64
                                 ###########################################################################################

LC_ALL=C urpme kpartx lib64dmmp0 lib64dmmp-devel lib64mpathcmd0 lib64mpathpersist0 lib64mpathvalid0 lib64multipath0 lib64multipath-tools-devel multipath-tools
To satisfy dependencies, the following 11 packages will be removed (2.1MB):
  dmraid-1.0.0-0.rc16.32.mga9.x86_64
   (due to unsatisfied kpartx >= 0.4.8-16,
    due to unsatisfied dmraid-events == 1.0.0-0.rc16.32.mga9)
  dmraid-events-1.0.0-0.rc16.32.mga9.x86_64
   (due to unsatisfied dmraid == 1.0.0-0.rc16.32.mga9)
  kpartx-0.8.8-2.1.mga9.x86_64
  lib64dmmp-devel-0.8.8-2.1.mga9.x86_64
   (due to unsatisfied lib64dmmp0 == 0.8.8-2.1.mga9)
  lib64dmmp0-0.8.8-2.1.mga9.x86_64
   (due to unsatisfied multipath-tools == 0.8.8-2.1.mga9)
  lib64mpathcmd0-0.8.8-2.1.mga9.x86_64
  lib64mpathpersist0-0.8.8-2.1.mga9.x86_64
   (due to missing libmpathcmd.so.0()(64bit),
    due to missing libmpathcmd.so.0(LIBMPATHCMD_1.0.0)(64bit),
    due to missing libmultipath.so.0()(64bit),
    due to missing libmultipath.so.0(LIBMULTIPATH_13.0.0)(64bit))
  lib64mpathvalid0-0.8.8-2.1.mga9.x86_64
   (due to missing libmpathcmd.so.0()(64bit),
    due to missing libmultipath.so.0()(64bit),
    due to missing libmultipath.so.0(LIBMULTIPATH_13.0.0)(64bit))
  lib64multipath-tools-devel-0.8.8-2.1.mga9.x86_64
   (due to unsatisfied lib64mpathcmd0 == 0.8.8-2.1.mga9,
    due to unsatisfied lib64multipath0 == 0.8.8-2.1.mga9,
    due to unsatisfied lib64mpathpersist0 == 0.8.8-2.1.mga9,
    due to unsatisfied lib64mpathvalid0 == 0.8.8-2.1.mga9)
  lib64multipath0-0.8.8-2.1.mga9.x86_64
   (due to missing libmpathcmd.so.0()(64bit),
    due to missing libmpathcmd.so.0(LIBMPATHCMD_1.0.0)(64bit))
  multipath-tools-0.8.8-2.1.mga9.x86_64
   (due to unsatisfied kpartx == 0.8.8)
Remove 11 packages? (y/N) y
removing dmraid-1.0.0-0.rc16.32.mga9.x86_64 dmraid-events-1.0.0-0.rc16.32.mga9.x86_64 kpartx-0.8.8-2.1.mga9.x86_64 lib64dmmp-devel-0.8.8-2.1.mga9.x86_64 lib64dmmp0-0.8.8-2.1.mga9.x86_64 lib64mpathcmd0-0.8.8-2.1.mga9.x86_64 lib64mpathpersist0-0.8.8-2.1.mga9.x86_64 lib64mpathvalid0-0.8.8-2.1.mga9.x86_64 lib64multipath-tools-devel-0.8.8-2.1.mga9.x86_64 lib64multipath0-0.8.8-2.1.mga9.x86_64 multipath-tools-0.8.8-2.1.mga9.x86_64
removing package lib64multipath-tools-devel-0.8.8-2.1.mga9.x86_64
     1/11: removing lib64multipath-tools-devel-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
removing package lib64dmmp-devel-0.8.8-2.1.mga9.x86_64
     2/11: removing lib64dmmp-devel-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
removing package lib64dmmp0-0.8.8-2.1.mga9.x86_64
     3/11: removing lib64dmmp0-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
removing package multipath-tools-0.8.8-2.1.mga9.x86_64
     4/11: removing multipath-tools-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
removing package lib64mpathpersist0-0.8.8-2.1.mga9.x86_64
     5/11: removing lib64mpathpersist0-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
removing package lib64mpathvalid0-0.8.8-2.1.mga9.x86_64
     6/11: removing lib64mpathvalid0-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
removing package lib64multipath0-0.8.8-2.1.mga9.x86_64
     7/11: removing lib64multipath0-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
removing package dmraid-events-1.0.0-0.rc16.32.mga9.x86_64
     8/11: removing dmraid-events-1.0.0-0.rc16.32.mga9.x86_64
                                 ###########################################################################################
Removed "/etc/systemd/system/sysinit.target.wants/dmraid-activation.service".
removing package dmraid-1.0.0-0.rc16.32.mga9.x86_64
     9/11: removing dmraid-1.0.0-0.rc16.32.mga9.x86_64
                                 ###########################################################################################
removing package kpartx-0.8.8-2.1.mga9.x86_64
    10/11: removing kpartx-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
removing package lib64mpathcmd0-0.8.8-2.1.mga9.x86_64
    11/11: removing lib64mpathcmd0-0.8.8-2.1.mga9.x86_64
                                 ###########################################################################################
writing /var/lib/rpm/installed-through-deps.list

The following packages:
  glibc-devel-2.36-52.mga9.x86_64
  kernel-userspace-headers-6.6.18-1.mga9.x86_64
  lib64aio-devel-0.3.113-1.mga9.x86_64
  lib64cap-devel-2.52-5.mga9.x86_64
  lib64devmapper-devel-1.02.185-1.mga9.x86_64
  lib64gcrypt-devel-1.10.2-2.mga9.x86_64
  lib64gpg-error-devel-1.47-1.mga9.x86_64
  lib64json-c-devel-0.16-1.mga9.x86_64
  lib64lz4-devel-1.9.4-1.mga9.x86_64
  lib64lzma-devel-5.4.3-1.mga9.x86_64
  lib64udev-devel-253.16-1.mga9.x86_64
  lib64urcu-devel-0.13.2-1.mga9.x86_64
  lib64xcrypt-devel-4.4.33-3.mga9.x86_64
  lib64zstd-devel-1.5.5-1.mga9.x86_64
  libcap-utils-2.52-5.mga9.x86_64
  systemd-devel-253.16-1.mga9.x86_64
are now orphaned, if you wish to remove them, you can use "urpme --auto-orphans"

LC_ALL=C urpme --auto-orphans --auto
removing glibc-devel-2.36-52.mga9.x86_64 kernel-userspace-headers-6.6.18-1.mga9.x86_64 lib64aio-devel-0.3.113-1.mga9.x86_64 lib64cap-devel-2.52-5.mga9.x86_64 lib64devmapper-devel-1.02.185-1.mga9.x86_64 lib64gcrypt-devel-1.10.2-2.mga9.x86_64 lib64gpg-error-devel-1.47-1.mga9.x86_64 lib64json-c-devel-0.16-1.mga9.x86_64 lib64lz4-devel-1.9.4-1.mga9.x86_64 lib64lzma-devel-5.4.3-1.mga9.x86_64 lib64udev-devel-253.16-1.mga9.x86_64 lib64urcu-devel-0.13.2-1.mga9.x86_64 lib64xcrypt-devel-4.4.33-3.mga9.x86_64 lib64zstd-devel-1.5.5-1.mga9.x86_64 libcap-utils-2.52-5.mga9.x86_64 systemd-devel-253.16-1.mga9.x86_64
removing package systemd-devel-253.16-1.mga9.x86_64
     1/16: removing systemd-devel-253.16-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64devmapper-devel-1.02.185-1.mga9.x86_64
     2/16: removing lib64devmapper-devel-1.02.185-1.mga9.x86_64
                                 ###########################################################################################
removing package glibc-devel-6:2.36-52.mga9.x86_64
     3/16: removing glibc-devel-6:2.36-52.mga9.x86_64
                                 ###########################################################################################
removing package lib64udev-devel-253.16-1.mga9.x86_64
     4/16: removing lib64udev-devel-253.16-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64cap-devel-2.52-5.mga9.x86_64
     5/16: removing lib64cap-devel-2.52-5.mga9.x86_64
                                 ###########################################################################################
removing package lib64xcrypt-devel-4.4.33-3.mga9.x86_64
     6/16: removing lib64xcrypt-devel-4.4.33-3.mga9.x86_64
                                 ###########################################################################################
removing package kernel-userspace-headers-6.6.18-1.mga9.x86_64
     7/16: removing kernel-userspace-headers-6.6.18-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64lz4-devel-1.9.4-1.mga9.x86_64
     8/16: removing lib64lz4-devel-1.9.4-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64lzma-devel-5.4.3-1.mga9.x86_64
     9/16: removing lib64lzma-devel-5.4.3-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64zstd-devel-1.5.5-1.mga9.x86_64
    10/16: removing lib64zstd-devel-1.5.5-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64urcu-devel-0.13.2-1.mga9.x86_64
    11/16: removing lib64urcu-devel-0.13.2-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64json-c-devel-0.16-1.mga9.x86_64
    12/16: removing lib64json-c-devel-0.16-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64aio-devel-0.3.113-1.mga9.x86_64
    13/16: removing lib64aio-devel-0.3.113-1.mga9.x86_64
                                 ###########################################################################################
removing package lib64gcrypt-devel-1.10.2-2.mga9.x86_64
    14/16: removing lib64gcrypt-devel-1.10.2-2.mga9.x86_64
                                 ###########################################################################################
removing package lib64gpg-error-devel-1.47-1.mga9.x86_64
    15/16: removing lib64gpg-error-devel-1.47-1.mga9.x86_64
                                 ###########################################################################################
removing package libcap-utils-2.52-5.mga9.x86_64
    16/16: removing libcap-utils-2.52-5.mga9.x86_64
                                 ###########################################################################################

Not previous round of this packages

Whiteboard: (none) => MGA9-64-OK

Comment 12 Thomas Andrews 2024-03-17 02:45:39 CET
Validating.

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update

Comment 13 Mageia Robot 2024-03-18 17:13:31 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2024-0071.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.