forked from pfsense/FreeBSD-ports
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathUPDATING
21164 lines (15636 loc) · 712 KB
/
UPDATING
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
This file documents some of the problems you may encounter when upgrading
your ports. We try our best to minimize these disruptions, but sometimes
they are unavoidable.
You should get into the habit of checking this file for changes each time
you update your ports collection, before attempting any port upgrades.
20230318:
AFFECTS: users of security/libressl
AUTHOR: [email protected]
The port has been updated to the latest stable version 3.6 of LibreSSL.
The shared library versions of the libraries have been bumped.
After upgrading, manually update all packages that depend on any of the
libraries provided by LibreSSL (libssl, libcrypto and libtls) since the
versions of these libraries have changed. Normally, you can obtain the
list of dependent software by running the following command:
# pkg info -r libressl
Then you should rebuild all ports depending on libressl to avoid dangling
shared library dependencies.
20230315:
AFFECTS: users of lang/ruby30
AUTHOR: [email protected]
The default ruby version has been updated from 3.0 to 3.1.
If you compile your own ports you may keep 3.0 as the default version by
adding the following lines to your /etc/make.conf file:
#
# Keep ruby 3.0 as default version
#
DEFAULT_VERSIONS+=ruby=3.0
If you wish to update to the new default version, you need to first stop any
software that uses ruby. Then, you will need to follow these steps, depending
upon how you manage your system.
If you use pkg, simply upgrade:
# pkg upgrade
If you do not use pkg, please check entry 20190420.
The description there should also work for this version.
20230314:
AFFECTS: users of security/openssl-devel
AUTHOR: [email protected]
Users using DEFAULT_VERSIONS=ssl=openssl-devel must update their
configuration to DEFAULT_VERSIUONS=ssl=openssl30 or openssl31.
20230313:
AFFECTS: users of databases/sqlite3
AUTHOR: [email protected]
Due to various ports not being prepared for this change (see 20230227
entry), the DQS option of databases/sqlite3 has been reenabled as a
stop gap measure. It is scheduled to be disabled again for good no
earlier than 20240101, giving downstream software authors more time
to fix their queries.
See also: https://sqlite.org/quirks.html#dblquote
20230311:
AFFECTS: users of net/dshell
AUTHOR: [email protected]
net/dshell now depends on net/py-pcapy-ng instead of net/py-pcapy.
Because net/py-pcapy-ng conflicts with net/py-pcapy, please uninstall
py39-pcapy with the following command before upgrading:
# pkg delete -f py39-pcapy
20230310:
AFFECTS: users of net-mgmt/unifi7
AUTHOR: [email protected]
The mongodb dependency has been changed from 36 to 44, as MongoDB 3.6
is long out out support and end of life.
The upgrade path should be as following:
1. Take a backup from within the unifi7 application PRIOR to
updating!
2. Stop the unifi7 service (if running)
3. Copy the "backup" directory from LOCALBASE/share/java/unifi/data
to a safe location. Also copy keystore and system.properties if
you have made any modifications to those files
4. Remove files and directories under LOCALBASE/share/java/unifi/data
5. Upgrade the package
6. Copy the "backup" directory from a safe location back to
LOCALBASE/share/java/unifi/data
7. Start the service
8. Restore the configuration from backup
As an optional step, review system.properties and keystore to merge any
manual modifications you have made (this has to be done with the application
stopped)
20230310:
AFFECTS: user of benchmarks/ddosify
AUTHOR: [email protected]
keep-alive is removed from config file. In default mode, the engine will use
keep-alive for all requests. If you want to disable keep-alive for a step, you
can add Connection: close header to the step.
20230306:
AFFECTS: users of www/qt5-webengine
AUTHOR: [email protected]
Users that upgrade www/qt5-webengine without using pkg/poudriere might
experience failures due to conflicts with the installed version of 5.15.2.
In that case, pkg delete -f the qt5-webengine package before building
the updated version.
20230304:
AFFECTS: users of accessibility/atk and accessibilty/at-spi2-atk
AUTHOR: [email protected]
The packages accessibility/atk and accessibility/at-spi2-atk have been
integegrated upstream into at-spi2-core.
Users of these packages can manually remove them prior to updating
accessibility/at-spi2-core using
pkg delete -f atk at-spi2-atk
if the pkg update process fails due to conflicting files.
20230227:
AFFECTS: users of databases/sqlite3
AUTHOR: [email protected]
Option DQS is now disabled by default. This option controls the "double
quoted string literals are accepted" quirk, permitting the use of double
quotes around string literals if enabled. Users who rely on this quirk
need to manually build databases/sqlite3 with the DQS option enabled.
See also: https://sqlite.org/quirks.html#dblquote
20230227:
AFFECTS: users of mail/py-spf-engine
AUTHOR: [email protected]
Default configuration file path of pyspf-milter has changed. Since
it looks for ${PREFIX}/etc/etc/pyspf-milter/pyspf-milter.conf now,
you should edit the file if you run pyspf-milter. Alternatively you
can specify other configuration file path by setting
pyspf_milter_conffile variable in /etc/rc.conf.
20230222:
AFFECTS: users of net-mgmt/netbox
AUTHOR: [email protected]
1. Please make sure that the PostgreSQL server for the NetBox instance is
running version 11 or higher. This is because PostgreSQL 10 is
End-of-Life since November 2022 and Django 4.1 requires PostgreSQL 11
as a minimum.
2. Please also check the pkg-message and the changelogs for further info.
20230218:
AFFECTS: users of databases/mysql57-(server|client)
AUTHOR: [email protected]
The default MySQL version has been updated from 5.7 to 8.0.
If you compile your own ports you may keep 5.7 as the default version by
adding the following lines to your /etc/make.conf file:
#
# Keep MySQL 5.7 as default version
#
DEFAULT_VERSIONS+=mysql=5.7
If you wish to update to the new default version, you need to first stop any
running server instance. Then, you will need to follow these steps, depending
on installed packages.
# pkg set -o databases/mysql57-client:databases/mysql80-client
# pkg set -o databases/mysql57-server:databases/mysql80-server
# pkg upgrade
20230213:
Affects: users of sysutils/nut*
AUTHOR: [email protected]
The nut file ownership fixups due to the UID/GID change from uucp/uucp
to nut/nut may not be desireable for all users. Some users with custom
file ownership may wish ownership to remain untouched. This revision
to the nut family of ports/packages allows users to optionally disable
automatic fixup of nut file ownership.
20230213:
AFFECTS: users of security/logcheck
AUTHOR: [email protected]
Since 1.4.1 ${PREFIX}/etc/logcheck/logcheck.logfiles is empty and
files to be checked by logcheck are specified in
${PREFIX}/etc/logcheck/logcheck.logfiles.d/syslog.logfiles. So if
you previously edited the former, then you should edit the latter
now.
20230210:
AFFECTS: users of mail/fetchmail
AUTHOR: [email protected]
Fetchmail now warns about OpenSSL before 1.1.1s or 3.0.7, and rejects wolfSSL
older than 5.5.1.
20230209:
AFFECTS: users of audio/jack
AUTHOR: [email protected]
audio/jack 1.9.22 fixes an issue with latency correction on FreeBSD.
Latency correction parameters have to be measured again after update.
20230130:
AFFECTS: users of USES=nodejs, www/node*, www/npm* and www/yarn*
AUTHOR: [email protected]
The current USES=nodejs has the following issues:
- www/node is not the default version while www/node16 is.
- It also means inconsistent naming of node ports.
- www/npm duplicates with www/npm-node16.
- www/yarn duplicates with www/yarn-node16.
The notable changes are introduced to fix the above issues:
- Rewrite Mk/Uses/nodejs.mk.
- Add new LTS version of nodejs (www/node18).
- Add new current version of nodejs (www/node19).
- Change default nodejs version from 16 to 18 (latest LTS),
- Use consistent naming for all supported node versions.
- Convert www/node, www/npm and www/yarn to meta ports.
After these changes:
- All supported node versions are named as node{14,16,18,19}.
- www/node is a meta port which depends on the default version
(e.g. www/node18)
- www/npm is a meta port which depends on the default version
(e.g. www/npm-node18)
- www/yarn is a meta port which depends on the default version
(e.g. www/yarn-node18)
20230129:
AFFECTS: users of benchmarks/ddosify
AUTHOR: [email protected]
In 0.13.0 some configuration keys have been renamed for consistency. Have a
look at https://github.com/ddosify/ddosify/releases/tag/v0.13.0 for details.
20230127:
AFFECTS: users of security/openvpn
AUTHOR: [email protected]
OpenVPN has been updated to the new upstream release v2.6.0, which
is quite compatible with v2.5 versions.
A copy of the latest v2.5.8 port is being kept as security/openvpn25 (or
openvpn25 package) until end of March 2023.
20230116:
AFFECTS: users of sysutils/nut and sysutils/nut-devel
AUTHOR: [email protected]
As of PR/268960 Network UPS Tools will now run under its own UID and GID
instead of uucp. Users who wish to continue using the uucp user and
group may add NUT_USER=uucp and NUT_GROUP=uucp to their make.conf.
After upgrading sysutils/nut or sysutils/nut-devel with this patch,
restart devd. Then restart nut. This will fix up the permissions of
UPS USB devices and allow nut to start normally.
20230111:
AFFECTS: users of sysutils/graylog
AUTHOR: [email protected]
Graylog 5.x and higher effectively constrains ElasticSearch
dependencies, and in most cases will force a migration to
OpenSearch 2.x, now available in ports. Plan accordingly.
20230104:
AFFECTS: users of mail/spamassassin
AUTHOR: [email protected]
As of spamassassin 4.0.0 (3fdfceb36029) the deprecated HashCash plug-in
was finally removed. Users using the HashCash plug-in will need to
remove references to it.
20221226:
AFFECTS: users of sysutils/zrepl
AUTHOR: [email protected]
The Prometheus metric zrepl_version_daemon has been converted to the
zrepl_start_time metric. The metric still reports the zrepl verison in a
label. But the metric value is now the Unix timestamp at the time the
daemon was started. The Grafana dashboard in dist/grafana has been
updated.
The RPC protocol version has also been bumped; all zrepl daemons in a
setup must be updated and restarted before replication can resume.
20221220:
AFFECTS: users of net-mgmt/unbound_exporter
AUTHOR: [email protected]
The config defaults for the log file and certificates have been changed.
See /usr/local/etc/rc.d/unbound_exporter for possible options and adjust
your rc.conf accordingly.
20221215:
AFFECTS: users of security/clamav
AUTHOR: [email protected]
Many users report that after updating ClamAV to 1.0.0 clamd and
freshclam fails to start with integrity check error of
databases. According to the result of investigation it happens with
following conditions.
1. ClamAV is built on non-cleanroom environment (that is, neither
FreeBSD official ClamAV package is used nor the package is built
by user with poudriere).
2. math/tomsfastmath is installed in the system that ClamAV is
built.
So if the errror happens on you system, uninstall TomsFastMath first
and then rebuild and reinstall ClamAV. The problem should disappear.
20221128:
AFFECTS: devel/py-proxmoxer
AUTHOR: [email protected]
AuthenticationError Moved
proxmoxer.backends.https.AuthenticationError was moved to
proxmoxer.AuthenticationError (the class itself is the same).
Any imports or references to proxmoxer.backends.https.AuthenticationError
should be changed to proxmoxer.AuthenticationError.
ProxmoxResourceBase Removed
While this should be a fully internal change, the ProxmoxResourceBase
class was removed. Use ProxmoxResource instead.
Removed ProxmoxHTTPTicketAuth
The auth_token and csrf_token arguments are no longer supported. If an
existing (still valid) token needs to be used, you can pass the token
as password and proxmoxer will attempt to renew the ticket and retrieve
a new token and CSRF token.
20221126:
AFFECTS: textproc/kibana8
AUTHOR: [email protected]
kibana8 now installs kibana-specific utilities into LOCALBASE/bin as symbolic
links.
Please check whether it will overwrite your local files with names same as
these utilities and if so, please rename them or move out of the way in a
different manner.
20221126:
AFFECTS: textproc/elasticsearch8
AUTHOR: [email protected]
elasticsearch8 now installs elasticsearch-specific utilities into
LOCALBASE/bin as symbolic links (i.e. elasticsearch-cli and similar).
Please check whether it will overwrite your local files with names same
as these utilities and if so, please rename them or move out of the way
in a different manner.
20221126:
AFFECTS: users of lang/php80
AUTHOR: [email protected]
The default version of PHP has been switched from 8.0 to 8.1.
If you use binary packages you should make a list of php packages
before running 'pkg upgrade':
# pkg info \*php80\* > ~/installed-php-ports-list
After the upgrade, check with such list if all your php extensions
are still installed, and reinstall them if needed.
If you use mod_php80 you need to deinstall it and install mod_php81.
20221123:
AFFECTS: x11-wm/jwm
AUTHOR: [email protected]
jwm 2.4 introduces changes in the configuration. To convert an existing v2.3
configuration file using xsltproc, run:
cp ~/.jwmrc ~/.jwmrc.old
xsltproc jwm-2.4.xslt ~/.jwmrc.old > ~/.jwmrc
If you have multiple configuration files, it may be necessary to apply the
XSLT to some or all of them depending on what configuration options are stored
in the file.
20221017:
AFFECTS: archivers/star
AUTHOR: [email protected]
With the update of devel/schilybase to 2022-10-16 a new port archivers/tartest
has been splitted off from archivers/star.
20221016:
AFFECTS: textproc/apache-solr
AUTHOR: [email protected]
Apache solr version 9 is released and made available as extra port
textproc/apache-solr9.
Version 9 cannot start directly with data from version 8. Additional steps
for data migration is required.
If you like to use the new version, deinstall the old version and install
the new version:
# pkg delete apache-solr
# pkg install apache-solr9
After this you need to migrate data and migration, for this check the solr
documentation.
20221015:
AFFECTS: users of gstreamer1-* when upgrading via port builds on the host
AUTHOR: [email protected]
The update of the gstreamer1-* ports to 1.20.3 requires a clean install of
gstreamer1-* ports. In particular, when trying to update ports in-place using
portupgrade or portmaster, the builds are likely to fail due to dependency
mismatches. If this is your preferred update path, you need to deinstall
(pkg delete -f) gstreamer1 and the plugins before reinstalling them from
the ports tree.
Note that pkg upgrade will do the right thing: If you use official FreeBSD
packages or build your own set of packages using poudriere, nothing special
is needed.
20221012:
AFFECTS: devel/websvn
AUTHOR: [email protected]
WebSVN 2.8.0 includes full PHP 8.x support which requires a change from PEAR
to Composer 2. You must manually install dependencies through it, the ports
system will not handle it anymore for you since */horde* (PR 266552) has been
marked as incompatible with PHP 8.x for the time being. See pkg-message for
detailed instructions.
20221011:
AFFECTS: users of security/acme.sh
AUTHOR: [email protected]
This update may break your install if you were using a symlink to
%%EXAMPLESDIR%%/acme.sh.conf - that file is no longer installed. Instead,
a log rotation configuration is now installed to etc/cron.d/acme.sh.sample
you should modify etc/cron.d/acme.sh to needs.
The port now installs a log rotation file to etc/newsyslog.d/acme.sh.sample
and you you should update etc/newsyslog.d/acme.sh to suit your needs.
This file has long been part of the port, but was never installed.
Neither the log rotation nor the crontab are active until you remove the
comments.
20221002:
AFFECTS: users of shells/bash
AUTHOR: [email protected]
Bash has been updated to version 5.2. In previous versions, the default port
option-set used to link against libreadline from ports. However, the current
version of devel/readline is too old for bash 5.2.
For now, the default option has been switched to use the bundled version of
libreadline and the other option is marked broken. Once devel/readline is
updated this can be reverted.
If you're updating bash from source and you've previously explicitly set to
use use PORTS_READLINE, you'll have to disable the PORTS_READLINE option
before updating:
# cd /usr/ports/shells/bash
# make config
or flush it entirely:
# cd /usr/ports/shells/bash
# make rmconfig
20220929:
AFFECTS: users of graphics/bmeps
AUTHOR: [email protected]
The executable name has been changed from this edition from bmpp to bitmap2pp
20220925:
AFFECTS: users of security/libressl
AUTHOR: [email protected]
The port has been updated to the latest stable version 3.5 of LibreSSL.
The shared library versions of the libraries have been bumped.
After upgrading, manually update all packages that depend on any of the
libraries provided by LibreSSL (libssl, libcrypto and libtls) since the
versions of these libraries have changed. Normally, you can obtain the
list of dependent software by running the following command:
# pkg info -r libressl
Then you should rebuild all ports depending on libressl to avoid dangling
shared library dependencies.
20220919:
AFFECTS: users of audio/strawberry
AUTHOR: [email protected]
strawberry now uses FLAVORs based on the qt version, offering -qt5 and
-qt6, with -qt5 the default.
You may need to explicitly install either of the new flavors.
20220919:
AFFECTS: users of sysutils/schilyutils
AUTHOR: [email protected]
Schilyutils has been split up into two ports. If you want the bosh shell,
the new port is shells/bosh, which can be installed with:
# pkg install bosh
or
# portmaster -o shells/bosh
20220918:
AFFECTS: users of mail/roundcube
AUTHOR: [email protected]
Roundcube has been upgraded to 1.6.0 and introduces breaking changes to
configuration options of remote services (imap, smtp, ldap, sieve). Check
https://roundcube.net/news/2022/07/28/roundcube-1.6.0-released for details.
Version 1.6 no longer includes the Classic and Larry skins, which are now
available as separate mail/roundcube-classic and mail/roundcube-larry ports.
20220910:
AFFECTS: users of devel/cmake
AUTHOR: [email protected]
CMake has been converted to a meta-port and new CMake packages created causes
conflicts with old binary packages prior to this change.
If CMake was installed using binary packages via pkg it needs to be
uninstalled using pkg delete before installing CMake and related packages
after this change.
pkg delete cmake
pkg install cmake-core
If you're using portmaster you also need to delete the old CMake package
before upgrading.
20220909:
AFFECTS: users of emulators/qemu
AUTHOR: [email protected]
emulators/qemu has been updated to 7.1.0. Previous 7.0.X branch has
been repocopied to emulators/qemu70. If someone wants to stick with 7.0.X
branch please use one of the following command:
# pkg install qemu70/qemu70-nox11(based on flavor used)
or
# portmaster -o emulators/qemu70 emulators/qemu
or
# portupgrade -o emulators/qemu70 emulators/qemu
20220903:
AFFECTS: users of editors/vim
AUTHOR: [email protected]
The Vim port no longer installs a system-wide vimrc. It drastically affected
config loading order, and led to various settings being clobbered, duplicated,
or ignored.
Vim's provided defaults.vim (/usr/local/share/vim/vim90/defaults.vim) continues
to be read just as before, but its settings are no longer clobbered. Take a look
in there for any settings you may want to change, and do ':h initialization' to
see where Vim looks for config files.
20220903:
AFFECTS: users of archivers/py-borgbackup
AUTHOR: [email protected]
Borgbackup has been upgraded to version 1.2. For users who you wish to
continue using version 1.1, use either of these commands for upgrading:
With binary packages through pkg:
pkg set -o archivers/py-borgbackup:archivers/py-borgbackup11
pkg upgrade
With portmaster or portupgrade (replace the command accordingly):
portmaster -o archivers/py-borgbackup11 archivers/py-borgbackup
20220901:
AFFECTS: users of mail/rainloop-community
AUTHOR: [email protected]
Since 1.17.0 upstream distributes only one "legacy" edition under MIT license
and mail/rainloop-community is removed as a result. So please uninstall
mail/rainloop-community (rainloop-community-phpXY) and install mail/rainloop
(rainloop-phpXY) instead.
20220831:
AFFECTS: users of x11/xscreensaver on 13.1-RELEASE
AUTHOR: [email protected]
With the update to 6.04, xscreensaver now uses security/unix-selfauth-helper
for PAM authentication. This relies on pam_exec.so, which had a bug causing
a segfault on authentication attempts prior to 13.1-RELEASE-p1. For details,
please see
https://www.freebsd.org/security/advisories/FreeBSD-EN-22:19.pam_exec.asc
Make sure your system is fully upgraded, otherwise you might be unable to
unlock your screen.
20220825:
AFFECTS: users of net/xrdp or net/xrdp-devel
AUTHOR: [email protected]
After xorg upgrade to 21.1.4, xorgxrdp session doesn't start as before
This is because bin/Xorg has been replaced with X server binary wrapper.
You must manually edit the Xorg section in etc/xrdp/sesman.ini to get it
working again.
The following is a short example of where, how to modify sesman.ini.
Make sure to replace LOCALBASE with your actual path.
[Xorg]
; Specify the path of non-suid Xorg executable. It might differ depending
; on your distribution and version. Find out the appropreate path for your
; environment. The typical path is known as follows:
;
; Fedora 26 or later : param=/usr/libexec/Xorg
; Debian 9 or later : param=/usr/lib/xorg/Xorg
; Ubuntu 16.04 or later : param=/usr/lib/xorg/Xorg
; Arch Linux : param=/usr/lib/Xorg
; CentOS 7 : param=/usr/bin/Xorg or param=Xorg
; CentOS 8 : param=/usr/libexec/Xorg
;
-param=Xorg
+param=LOCALBASE/libexec/Xorg
20220815:
AFFECTS: users of net/keycloak
AUTHOR: [email protected]
The flavors -mysql and -postgres were removed, the necessary configuration
for those database backends was rolled into the base release by upstream.
The configuration files changed completely, so they need to be rebuilt from
scratch.
20220807:
AFFECTS: users of news/inn
AUTHOR: [email protected]
The inn port has been updated to 2.7 release. Users upgrading from
prior versions should read through the announcement for any manual
upgrading steps that apply to your environment.
https://lists.isc.org/pipermail/inn-announce/2022-July/000015.html
20220711:
AFFECTS: users of security/stunnel
AUTHOR: [email protected]
The stunnel port has been updated to drop privileges to the stunnel
user by default.
As a result of this change, the pid file location has changed. If
you have a running copy of stunnel, you should stop the process
before performing the upgrade. Alternatively, you will need to
# pkill stunnel;service stunnel start
after the upgrade has been completed.
202207XYZ:
AFFECTS: users of devel/maven-wrapper and devel/maven
AUTHOR: [email protected]
The environment variable M2_HOME has been replaced with more common
MAVEN_HOME which can be used to pass a custom Maven home directory.
20220629:
AFFECTS: updating x11-servers/xorg-server from a port
AUTHOR: [email protected]
The xorg-server port now has a library dependency on x11/libxcvt,
which cannot be installed when the previous version of xorg-server
is present. To be able to update xorg-server from a port, the
previous version needs to be manually deinstalled to allow libxcvt
to be installed.
20220628:
AFFECTS: users of Erlang and Elixir
AUTHOR: [email protected]
For more than a decade, the Elixir Mix tool and the Erlang rebar
or erlang.mk build tools have been the de facto way of installing
and managing packages for specific applications.
All main-stream applications, from Riak, CouchDB, RabbitMQ, Phoenix,
and Elixir, expect that packages are fetched and compiled into an OTP
Release, with in-built version locking, external package management.
There is no point in maintaining a large number of libraries, that
are used neither for development, nor operations.
Users are directed to https://rebar3.org/ https://erlang.mk/ or
https://elixir-lang.org/getting-started/mix-otp/introduction-to-mix.html
to fetch custom packages.
https://www.freebsd.org/status/report-2021-07-2021-09/#_freebsd_erlang_ecosystem_ports_update
20220626:
AFFECTS: users of python
AUTHOR: [email protected]
The default version of python3 and python was switched to 3.9.
For ports users wanting to keep version 3.8 as default,
add DEFAULT_VERSIONS+= python=3.8 python3=3.8 to make.conf
Following procedures may ease the upgrade:
For users of pre-build packages:
# sh
# for i in $(pkg query -g %n 'py38-*'); do pkg set -yn ${i}:py39-${i#py38-}; done
# pkg upgrade
For portmaster users:
# sh
# portmaster -o lang/python39 python38
# REINSTALL="$(pkg info -o "*py38*" | awk '{printf "%s ", $2}')"
# pkg delete -f "*py38*"
# portmaster $REINSTALL
# REBUILD=$(pkg query -g "%n:%dn" '*' | grep py3 | grep -v py39 | cut -d : -f 1 | sort -u)
# portmaster $REBUILD
# REBUILD2=$(pkg list | grep python-38 | xargs pkg which | awk '{print $6}' | sort -u)
# portmaster $REBUILD2
Final steps (for pre-built packages & portmaster):
If no longer required, Python 3.8 can be removed via
"pkg remove python38" and the directory /usr/local/lib/python3.8 can
then be deleted afterwards, if not empty.
20220625:
AFFECTS: users of sysutils/fusefs-bindfs
AUTHOR: [email protected]
Bindfs defaults to use direct I/O since version 1.16. While this results
in major performance improvements as well as several bug fixes, this also
breaks direct legacy calls to mmap. If your application still uses them
consider these two options:
1. Mount using `--no-direct-io`
2. Upgrade your application in order to query mapping guards
20220623:
AFFECTS: users of science/gramps
AUTHOR: [email protected]
databases/py-bsddb3 is deprecated and will be removed in the future. With that
gramps will lose the ability to load family trees using Berkeley DB.
It is suggested to migrate all family trees using Berkeley DB by exporting
them to gramps xml and import that gramps xml into a family tree using sqlite
as database.
20220620:
AFFECTS: users of www/selenium
AUTHOR: [email protected]
The port has changed startup args so if you are using selenium_args= in
rc.conf you need to add the parameter "standalone" manually.
20220616:
AFFECTS: users of net-mgmt/netbox
AUTHOR: [email protected]
/!\ WARNING /!\
The NetBox 3.2 release contains major changes, so at least items 1.), 2.)
and 3.) must be checked before proceeding with the upgrade!
/!\ WARNING /!\
1. This release includes a database migration that will remove the "asn",
"contact_name", "contact_phone", and "contact_email" fields from the
site model. (These fields have been superseded by the ASN and contact
models introduced in NetBox v3.1.)
To protect against the accidental destruction of data, the upgrade
process will fail if any sites still have data in any of these fields.
To bypass this safeguard, set the NETBOX_DELETE_LEGACY_DATA environment
variable when running the upgrade script, which will permit the
destruction of legacy data.
A set of migration scripts is available to assist with the migration of
legacy site data:
https://github.com/netbox-community/migration-scripts
2. NetBox v3.2 requires Python 3.8 or later.
3. If the NetBox Plugin "net-mgmt/py-netbox-plugin-extension" is used,
please disable it before the migrations are applied. This can be done
by removing the entry "netbox_plugin_extensions" from the "PLUGINS"
section in the NetBox configuration.
Once the upgrade is done, this port/package can be safely removed as
it's no longer required.
4. Please also check the pkg-message and the changelogs for further info.
20220608:
AFFECTS: devel/autoconf-wrapper, devel/autoconf213
AUTHOR: [email protected]
These ports have been renamed to devel/autoconf-switch and devel/autoconf2.13
respectively. If your favourite port updating tool cannot handle that then
just remove the packages with "pkg delete" and then install the new port.
20220607:
AFFECTS: security/openssh-portable
AUTHOR: [email protected]
OpenSSH has been updated to 9.0p1 with incompatible changes.
See https://www.openssh.com/txt/release-9.0 for details.
20220602:
AFFECTS: sysutils/graylog
AUTHOR: [email protected]
Graylog 4.3.0+ fails to start if graylog's internal collector for
system statistics is enabled. This will eventually be addressed
upstream.
Add disable_native_system_stats_collector=true to your graylog.conf.
20220513:
AFFECTS: devel/nexus2-oss
AUTHOR: [email protected]
Nexus 2.15.x introduces incompatible configuration changes. You
must review changes in ETCDIR/wrapper.conf and ETCDIR/jetty*.xml
with updated samples as well as NEXUS_WORKDIR/conf/logback-nexus.xml
with its origin from
DATADIR/nexus/WEB-INF/lib/nexus-core-VERSION.jar!/META-INF/log/logback-nexus.xml,
grant write access to files in ETCDIR since Nexus itself might
update files in place otherwise your instance will not properly
work after the update.
20220510
AFFECTS: sysutils/zrepl
AUTHOR: [email protected]
The zrepl update to 0.5.0.8 includes the following breaking changes:
- The Prometheus metric zrepl_version_daemon was converted to zrepl_start_time
The metric still reports the zrepl version in a label.
But the metric *value* is now the Unix timestamp at the time the daemon was started.
The Grafana dashboard in zrepl examples directory has been updated.
20220502:
AFFECTS: mail/mutt
AUTHOR: [email protected]
Default header cache option has been changed to the new option LMDB using
databases/lmdb. The BDB option still exists but now uses databases/db18 due
to the EOL of databases/db5.
20220501:
AFFECTS: users of drm-current-kmod and drm-devel-kmod
AUTHOR: [email protected]
Both ports where removed.
If you were using either one of them directly (i.e. without using
graphics/drm-kmod metaport) use graphics/drm-510-kmod.
If you have some problems with this one try drm-54-kmod and report
a bug on https://github.com/freebsd/drm-kmod.
20220428:
AFFECTS: users of databases/redis
AUTHOR: [email protected]
The databases/redis port has been updated to 7.0. Users wanting to
stay on 6.2 can replace databases/redis with databases/redis62 with
one of the following commands.
If you use pkg with binary packages:
# pkg set -o databases/redis:databases/redis62
# pkg upgrade
If you use portmaster:
# portmaster -o databases/redis62 databases/redis
If you use portupgrade:
# portupgrade -o databases/redis62 databases/redis
20220426:
AFFECTS: users of deskutils/grantleetheme
AUTHOR: [email protected]
The pkg update of deskutils/grantleetheme to 22.04 can fail due
to a filesystem location having changed from being a file to being
a directory. This leads to pkg's temporary file creation throwing
an error.
To update to KDE Gear 22.04 please run
# pkg delete -f grantleetheme
prior to the update.
20220424:
AFFECTS: users of emulators/qemu
AUTHOR: [email protected]
emulators/qemu has been updated to 7.0.0. Previous 6.2.X branch has
been repocopied to emulators/qemu6. If someone wants to stick with 6.2.X
branch please use one of the following command:
# pkg install qemu6/qemu6-nox11(based on flavor used)
or
# portmaster -o emulators/qemu6 emulators/qemu
or
# portupgrade -o emulators/qemu6 emulators/qemu
20220421:
AFFECTS: users of lang/ruby27
AUTHOR: [email protected]
The default ruby version has been updated from 2.7 to 3.0.
If you compile your own ports you may keep 2.7 as the default version by
adding the following lines to your /etc/make.conf file:
#
# Keep ruby 2.7 as default version
#
DEFAULT_VERSIONS+=ruby=2.7
If you wish to update to the new default version, you need to first stop any
software that uses ruby. Then, you will need to follow these steps, depending
upon how you manage your system.
If you use pkg, simply upgrade:
# pkg upgrade
If you do not use pkg, please check entry 20190420.
The description there should also work for this version.
20220413:
AFFECTS: users of net-im/py-matrix-synapse
AUTHOR: [email protected]
Synapse will now refuse to start up if open registration is enabled,
in order to help mitigate abuse across the federation. If you would
like to provide registration to anyone, consider adding email,
recaptcha or token-based verification in order to prevent automated
registration from bad actors. This check can be disabled by setting
the enable_registration_without_verification option in your
homeserver configuration file to true. More details are available in
the upgrade notes[0].
Synapse will additionally now refuse to start when using PostgreSQL
with a non-C values for COLLATE and CTYPE, unless the config flag
allow_unsafe_locale, found in the database section of the
configuration file, is set to true. See the upgrade notes[1] for
details.
[0] https://matrix-org.github.io/synapse/v1.56/upgrade.html#open-registration-without-verification-is-now-disabled-by-default
[1] https://matrix-org.github.io/synapse/v1.56/upgrade#change-in-behaviour-for-postgresql-databases-with-unsafe-locale
20220410:
AFFECTS: users of sysutils/screen
AUTHOR: [email protected]
As of sysutils/screen-4.9.0_5, the MULTUSER option is default, reverting
to the traditional setuid-root behavior. People who wish to secure their
screen install must terminate all screen sessions, then install screen
without the MULTIUSER option. The option was reversed because it caused
too much astonishment among users of screen.
20220401:
AFFECTS: security/sshguard