INFRA-108: pfSense 2.4.3 upgrade

Metadata

Source
INFRA-108
Type
Improvement
Priority
Major
Status
Resolved
Resolution
Done
Assignee
Giovanni Tirloni
Reporter
Giovanni Tirloni
Created
2018-02-02T05:51:03.314-0500
Updated
2018-04-28T13:58:47.924-0400
Versions
N/A
Fixed Versions
N/A
Component
N/A

Description

This release will have fixes for Meltdown/Spectre.

Attachments

Comments

  • Giovanni Tirloni commented 2018-02-27T11:00:31.881-0500

    Release notes are public but v2.4.3 is still not available for download (https://doc.pfsense.org/index.php/2.4.3_New_Features_and_Changes)

  • Giovanni Tirloni commented 2018-03-09T08:29:00.741-0500

    Confirmed with pfSense staff that 2.4.3 should be available in March. It's still only available in the dev channel.

  • Giovanni Tirloni commented 2018-04-03T04:41:53.325-0400

    v2.4.3 is finally available. I will coordinate with @@Alan Harnum to find a time slot to apply this update.

  • Giovanni Tirloni commented 2018-04-27T20:00:24.329-0400

    Updated to pfSense 2.4.3 successfully. All service monitors are clear.

    Proactively changed "Firewall Maximum Table Entries" from 200k to 400k due to some issues reported by other pfSense users.

    2.4.3-RELEASE (amd64) 
built on Mon Mar 26 18:02:04 CDT 2018 
FreeBSD 11.1-RELEASE-p7 

The system is on the latest version.
Version information updated at Fri Apr 27 19:57:02 EDT 2018

  • Giovanni Tirloni commented 2018-04-28T13:58:47.924-0400

    For reference:

    >>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
>>> Setting vital flag on pkg... done.
>>> Downloading upgrade packages... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
Checking for upgrades (79 candidates): .......... done
Processing candidates (79 candidates): .......... done
The following 82 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	devcpu-data: 1.16 [pfSense]
	py27-ply: 3.10_1 [pfSense]
	py27-setuptools: 36.5.0 [pfSense]

Installed packages to be UPGRADED:
	unbound: 1.6.6 -> 1.6.8 [pfSense]
	sudo: 1.8.21p2 -> 1.8.21p2_1 [pfSense]
	strongswan: 5.6.0 -> 5.6.2_1 [pfSense]
	sqlite3: 3.20.1_1 -> 3.21.0_1 [pfSense]
	snort: 2.9.9.0_3 -> 2.9.11.1_1 [pfSense]
	smartmontools: 6.5_2 -> 6.6_1 [pfSense]
	readline: 7.0.3 -> 7.0.3_1 [pfSense]
	radvd: 1.9.1 -> 2.17_4 [pfSense]
	python27: 2.7.14 -> 2.7.14_1 [pfSense]
	php56-zlib: 5.6.31 -> 5.6.34 [pfSense]
	php56-xmlwriter: 5.6.31 -> 5.6.34 [pfSense]
	php56-xmlreader: 5.6.31 -> 5.6.34 [pfSense]
	php56-xml: 5.6.31 -> 5.6.34 [pfSense]
	php56-tokenizer: 5.6.31 -> 5.6.34 [pfSense]
	php56-sysvshm: 5.6.31 -> 5.6.34 [pfSense]
	php56-sysvsem: 5.6.31 -> 5.6.34 [pfSense]
	php56-sysvmsg: 5.6.31 -> 5.6.34 [pfSense]
	php56-sqlite3: 5.6.31 -> 5.6.34 [pfSense]
	php56-sockets: 5.6.31 -> 5.6.34 [pfSense]
	php56-simplexml: 5.6.31 -> 5.6.34 [pfSense]
	php56-shmop: 5.6.31 -> 5.6.34 [pfSense]
	php56-session: 5.6.31 -> 5.6.34 [pfSense]
	php56-readline: 5.6.31 -> 5.6.34 [pfSense]
	php56-posix: 5.6.31 -> 5.6.34 [pfSense]
	php56-pfSense-module: 0.54 -> 0.61 [pfSense]
	php56-pdo_sqlite: 5.6.31 -> 5.6.34 [pfSense]
	php56-pdo: 5.6.31 -> 5.6.34 [pfSense]
	php56-pcntl: 5.6.31 -> 5.6.34 [pfSense]
	php56-openssl: 5.6.31 -> 5.6.34 [pfSense]
	php56-opcache: 5.6.31 -> 5.6.34 [pfSense]
	php56-mcrypt: 5.6.31 -> 5.6.34 [pfSense]
	php56-mbstring: 5.6.31_1 -> 5.6.34 [pfSense]
	php56-ldap: 5.6.31 -> 5.6.34 [pfSense]
	php56-json: 5.6.31 -> 5.6.34 [pfSense]
	php56-hash: 5.6.31 -> 5.6.34 [pfSense]
	php56-gettext: 5.6.31 -> 5.6.34 [pfSense]
	php56-filter: 5.6.31 -> 5.6.34 [pfSense]
	php56-dom: 5.6.31 -> 5.6.34 [pfSense]
	php56-curl: 5.6.31 -> 5.6.34 [pfSense]
	php56-ctype: 5.6.31 -> 5.6.34 [pfSense]
	php56-bz2: 5.6.31 -> 5.6.34 [pfSense]
	php56-bcmath: 5.6.31 -> 5.6.34 [pfSense]
	php56: 5.6.31 -> 5.6.34 [pfSense]
	pfSense-rc: 2.4.1 -> 2.4.3 [pfSense-core]
	pfSense-pkg-snort: 3.2.9.5_3 -> 3.2.9.6_1 [pfSense]
	pfSense-kernel-pfSense: 2.4.1 -> 2.4.3 [pfSense-core]
	pfSense-default-config: 2.4.1 -> 2.4.3 [pfSense-core]
	pfSense-base: 2.4.1 -> 2.4.3 [pfSense-core]
	pfSense-Status_Monitoring: 1.7.5 -> 1.7.6 [pfSense]
	pfSense: 2.4.1 -> 2.4.3 [pfSense]
	pear: 1.10.5 -> 1.10.5_1 [pfSense]
	p7zip: 16.02 -> 16.02_1 [pfSense]
	openvpn: 2.4.4 -> 2.4.4_1 [pfSense]
	oniguruma6: 6.4.0 -> 6.6.1 [pfSense]
	ntp: 4.2.8p10_2 -> 4.2.8p11 [pfSense]
	nginx: 1.12.1_2,2 -> 1.12.2_3,2 [pfSense]
	nettle: 3.3 -> 3.4 [pfSense]
	mysql56-client: 5.6.37_1 -> 5.6.39 [pfSense]
	luajit: 2.0.5 -> 2.1.0.b3 [pfSense]
	libzmq4: 4.2.2 -> 4.2.2_1 [pfSense]
	libxml2: 2.9.4 -> 2.9.7 [pfSense]
	libunistring: 0.9.7 -> 0.9.8 [pfSense]
	libnghttp2: 1.26.0 -> 1.29.0 [pfSense]
	libffi: 3.2.1_1 -> 3.2.1_2 [pfSense]
	libevent: 2.1.8 -> 2.1.8_1 [pfSense]
	json-c: 0.12.1 -> 0.13 [pfSense]
	isc-dhcp43-server: 4.3.6_1 -> 4.3.6P1 [pfSense]
	isc-dhcp43-relay: 4.3.6 -> 4.3.6P1 [pfSense]
	isc-dhcp43-client: 4.3.6 -> 4.3.6P1 [pfSense]
	indexinfo: 0.2.6 -> 0.3.1 [pfSense]
	idnkit: 1.0_6 -> 1.0_7 [pfSense]
	glib: 2.50.2_6,1 -> 2.50.3_1,1 [pfSense]
	expat: 2.2.1 -> 2.2.5 [pfSense]
	dpinger: 2.0_1 -> 3.0 [pfSense]
	daq: 2.0.6_1 -> 2.2.2 [pfSense]
	curl: 7.56.0 -> 7.58.0 [pfSense]
	ca_root_nss: 3.32.1 -> 3.36 [pfSense]
	bind-tools: 9.11.2 -> 9.11.2P1 [pfSense]

Installed packages to be REINSTALLED:
	miniupnpd-1.9.20160113,1 [pfSense] (options changed)

Number of packages to be installed: 3
Number of packages to be upgraded: 78
Number of packages to be reinstalled: 1

The process will require 10 MiB more space.
92 MiB to be downloaded.
[1/82] Fetching unbound-1.6.8.txz: .......... done
[2/82] Fetching sudo-1.8.21p2_1.txz: .......... done
[3/82] Fetching strongswan-5.6.2_1.txz: .......... done
[4/82] Fetching sqlite3-3.21.0_1.txz: .......... done
[5/82] Fetching snort-2.9.11.1_1.txz: .......... done
[6/82] Fetching smartmontools-6.6_1.txz: .......... done
[7/82] Fetching readline-7.0.3_1.txz: .......... done
[8/82] Fetching radvd-2.17_4.txz: ....... done
[9/82] Fetching python27-2.7.14_1.txz: .......... done
[10/82] Fetching php56-zlib-5.6.34.txz: .. done
[11/82] Fetching php56-xmlwriter-5.6.34.txz: .. done
[12/82] Fetching php56-xmlreader-5.6.34.txz: .. done
[13/82] Fetching php56-xml-5.6.34.txz: ... done
[14/82] Fetching php56-tokenizer-5.6.34.txz: . done
[15/82] Fetching php56-sysvshm-5.6.34.txz: . done
[16/82] Fetching php56-sysvsem-5.6.34.txz: . done
[17/82] Fetching php56-sysvmsg-5.6.34.txz: .. done
[18/82] Fetching php56-sqlite3-5.6.34.txz: ... done
[19/82] Fetching php56-sockets-5.6.34.txz: ..... done
[20/82] Fetching php56-simplexml-5.6.34.txz: ... done
[21/82] Fetching php56-shmop-5.6.34.txz: . done
[22/82] Fetching php56-session-5.6.34.txz: .... done
[23/82] Fetching php56-readline-5.6.34.txz: .. done
[24/82] Fetching php56-posix-5.6.34.txz: .. done
[25/82] Fetching php56-pfSense-module-0.61.txz: ...... done
[26/82] Fetching php56-pdo_sqlite-5.6.34.txz: .. done
[27/82] Fetching php56-pdo-5.6.34.txz: ...... done
[28/82] Fetching php56-pcntl-5.6.34.txz: .. done
[29/82] Fetching php56-openssl-5.6.34.txz: ...... done
[30/82] Fetching php56-opcache-5.6.34.txz: ........ done
[31/82] Fetching php56-mcrypt-5.6.34.txz: .. done
[32/82] Fetching php56-mbstring-5.6.34.txz: .......... done
[33/82] Fetching php56-ldap-5.6.34.txz: ... done
[34/82] Fetching php56-json-5.6.34.txz: ... done
[35/82] Fetching php56-hash-5.6.34.txz: .......... done
[36/82] Fetching php56-gettext-5.6.34.txz: . done
[37/82] Fetching php56-filter-5.6.34.txz: ... done
[38/82] Fetching php56-dom-5.6.34.txz: ....... done
[39/82] Fetching php56-curl-5.6.34.txz: .... done
[40/82] Fetching php56-ctype-5.6.34.txz: . done
[41/82] Fetching php56-bz2-5.6.34.txz: .. done
[42/82] Fetching php56-bcmath-5.6.34.txz: ... done
[43/82] Fetching php56-5.6.34.txz: .......... done
[44/82] Fetching pfSense-rc-2.4.3.txz: .. done
[45/82] Fetching pfSense-pkg-snort-3.2.9.6_1.txz: .......... done
[46/82] Fetching pfSense-kernel-pfSense-2.4.3.txz: .......... done
[47/82] Fetching pfSense-default-config-2.4.3.txz: . done
[48/82] Fetching pfSense-base-2.4.3.txz: .......... done
[49/82] Fetching pfSense-Status_Monitoring-1.7.6.txz: ... done
[50/82] Fetching pfSense-2.4.3.txz: . done
[51/82] Fetching pear-1.10.5_1.txz: .......... done
[52/82] Fetching p7zip-16.02_1.txz: .......... done
[53/82] Fetching openvpn-2.4.4_1.txz: .......... done
[54/82] Fetching oniguruma6-6.6.1.txz: .......... done
[55/82] Fetching ntp-4.2.8p11.txz: .......... done
[56/82] Fetching nginx-1.12.2_3,2.txz: .......... done
[57/82] Fetching nettle-3.4.txz: .......... done
[58/82] Fetching mysql56-client-5.6.39.txz: .......... done
[59/82] Fetching miniupnpd-1.9.20160113,1.txz: ........ done
[60/82] Fetching luajit-2.1.0.b3.txz: .......... done
[61/82] Fetching libzmq4-4.2.2_1.txz: .......... done
[62/82] Fetching libxml2-2.9.7.txz: .......... done
[63/82] Fetching libunistring-0.9.8.txz: .......... done
[64/82] Fetching libnghttp2-1.29.0.txz: .......... done
[65/82] Fetching libffi-3.2.1_2.txz: ..... done
[66/82] Fetching libevent-2.1.8_1.txz: .......... done
[67/82] Fetching json-c-0.13.txz: ........ done
[68/82] Fetching isc-dhcp43-server-4.3.6P1.txz: .......... done
[69/82] Fetching isc-dhcp43-relay-4.3.6P1.txz: .......... done
[70/82] Fetching isc-dhcp43-client-4.3.6P1.txz: .......... done
[71/82] Fetching indexinfo-0.3.1.txz: . done
[72/82] Fetching idnkit-1.0_7.txz: .......... done
[73/82] Fetching glib-2.50.3_1,1.txz: .......... done
[74/82] Fetching expat-2.2.5.txz: .......... done
[75/82] Fetching dpinger-3.0.txz: .. done
[76/82] Fetching daq-2.2.2.txz: .......... done
[77/82] Fetching curl-7.58.0.txz: .......... done
[78/82] Fetching ca_root_nss-3.36.txz: .......... done
[79/82] Fetching bind-tools-9.11.2P1.txz: .......... done
[80/82] Fetching devcpu-data-1.16.txz: .......... done
[81/82] Fetching py27-ply-3.10_1.txz: .......... done
[82/82] Fetching py27-setuptools-36.5.0.txz: .......... done
Checking integrity... done (0 conflicting)
>>> Upgrading pfSense kernel... 
Checking integrity... done (0 conflicting)
The following 2 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
	pfSense-kernel-pfSense: 2.4.1 -> 2.4.3 [pfSense-core]
	pfSense-rc: 2.4.1 -> 2.4.3 [pfSense-core]

Number of packages to be upgraded: 2
[1/2] Upgrading pfSense-rc from 2.4.1 to 2.4.3...
[1/2] Extracting pfSense-rc-2.4.3: .... done
[2/2] Upgrading pfSense-kernel-pfSense from 2.4.1 to 2.4.3...
[2/2] Extracting pfSense-kernel-pfSense-2.4.3: .......... done
===> Keeping a copy of current kernel in /boot/kernel.old
Upgrade is complete.  Rebooting in 10 seconds.
Success