BSDSec

deadsimple BSD Security Advisories and Announcements

Announcing the pkgsrc-2023Q3 branch

The pkgsrc developers are proud to announce the 80th quarterly release
of pkgsrc, the cross-platform packaging system.  pkgsrc contains over
27,000 packages, with varying support across 23 distinct operating
systems.  More information on pkgsrc itself is available at
https://www.pkgsrc.org/

Since the pkgsrc-2023Q2 release, 199 packages were added, 174 removed,
and 2199 updates (to 1503 distinct packages) were processed.  These
included 27 Go, 101 Perl, 558 Python, and 263 Ruby package updates.

For the 2023Q3 release we welcome the following notable package
additions:

 - hwprobe 1.6
 - opensmtpd 7.3.0p1 (and opensmtpd-filters meta-package)
 - spotifyd 0.3.5
 - qt6-qtwayland 6.5.2
 - wxPython 4.2.1
 - a large number of KDE packages associated with 23.04.3

We welcome the following notable updates:

 - boost 1.83.0
 - CMake 3.27.6
 - Emacs 29
 - Firefox 117.0.1
 - Ghostscript 10.01.2
 - Go 1.21.0 (default version remains 1.20)
 - HarfBuzz 8.1.1
 - MariaDB 10.11.4
 - matrix-synapse 1.91.2
 - MongoDB 6.0.8
 - NodeJS 20.7.0
 - pkgin 23.8.1
 - Postgis 3.4.0
 - PostgreSQL 16.0
 - Thunderbird 115.1.1
 - Rust 1.70.0
 - SQLite 3.43.1
 - Squid 6.3
 - timescaledb 2.11.2

As always, many packages have been brought up to date relative to
upstream micro releases.  Examples include:

 - Firefox ESR 102.13.0
 - Go 1.19.13, 1.20.8
 - MariaDB 10.5.21, 10.6.14
 - Nextcloud 27.0.2 (and 26.0.5 for use in upgrading)
 - NodeJS 16.20.2, 18.18.0
 - PostgreSQL 11.21, 12.16, 13.12, 14.9, 15.4
 - Python 3.8.17, 3.9.17, 3.10.12, 3.11.4
 - qgis 3.28.11
 - Qt6 6.5.2
 - Xfce4 (some core and plugin components updated)

This branch we say notable goodbyes to:

 - Django 1.4 and 2
 - Firefox 91
 - gst-plugins0.10
 - KDE Telepathy
 - Python 3.7
 - Ruby 3.0
 - Ruby on Rails 5.2 and 6.0
 - wxGTK28 and py-wxWidgets

Changes to the pkgsrc infrastructure and notes:

 - The default version of emacs is now 28.
 - The default version of PostgreSQL is now 14.
 - The default version of Python is now 3.11.
 - Compiler selection logic was substantially improved, separating the
   concepts of needing a language variant (e.g., C++17), needing other
   features (e.g. std::filesystem), needing to force --std= because
   upstream fails to, and needing a specific gcc version for other
   reasons.
 - Crossbuilding support was substantially improved.
 - Note that many packages do not build on NetBSD 8 and other systems
   with non-recent compilers.  Users who wish to run these programs
   are advised to update to an up-to-date version of their operating
   system.
 - There are on the order of 1000 fewer buildable packages for i386 vs
   x86_64, at least on NetBSD.  Those using i386 on hardware that
   supports x86_64 may wish to upgrade to NetBSD/x86_64.

Instructions on using the binary package manager can be found at
https://pkgin.net, and pkgsrc itself can be retrieved via CVS, tar file,
and other mirrors.  See https://www.netbsd.org/docs/pkgsrc/getting.html
for instructions.  The branch name for the 2023Q3 branch is
"pkgsrc-2023Q3".