From nobody Tue Apr 21 18:57:59 2026 X-Original-To: freebsd-pkgbase@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4g0WpG5zcYz6ZKGJ for ; Tue, 21 Apr 2026 18:58:14 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic301-22.consmr.mail.gq1.yahoo.com (sonic301-22.consmr.mail.gq1.yahoo.com [98.137.64.148]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4g0WpG05GXz47k8 for ; Tue, 21 Apr 2026 18:58:13 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1776797886; bh=kGQzlNXfvUKkeitu2ZuXjSOYP5QRmFXY3wlXrLAnP08=; h=Date:Subject:To:References:From:In-Reply-To:From:Subject:Reply-To; b=ccCJItOKT2kER5pInwdhNSkl/rvCUt03DuQ8TkzSCdY7iXeiv8fS9ljjg/kluVSqWEIGTkjlLc9uq7248H9bgJYMPShTjtOoJy1dqOEQne9Iv/NForFIgRwOwtK7F7iKM6fZ/bwlaT+i95y9iGw9gUMbz7FLzIljmUA/p02sA+dqqXAD/1wJo+CRa25bENzXGVcgjyD0Lv38D/boRW7m3Hk7vVXQSw33Upw5eO1zqad+mAMZsa+Db/N3Cug6Fruqf4/uvR4vx20AvXo+/k4MX22Z2rq8rwmTQgatM4Wp7p2yOkCH5j6m09/5A2TPfIrXozMVqaFWDRBSK7gnyb07yQ== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1776797886; bh=3Nv7cZMtlSlZLYaOZLhTtMWRr6iX1yAkri+a+GeiTGd=; h=X-Sonic-MF:Date:Subject:To:From:From:Subject; b=oa40D6XnMqMEo+CWJk3Ugq/KHvTWoC74WLOMj90ZMXImga5cQQYoERe1BpTPgCYEUbMhPbhvoc61JBak5nHmenDtOS6wrPxUusa7qVkTCJFBx0D9zh+ZollJzfhtv72T8FLItgERe+DuszdRtJ54N1WWS9ykNdr5rqTKIabTdNrtocZiTLccUwYxfC7c8K3XedIVsKMkQfktpE6DBBGFCltlVQ7vw6TLegZQF8FE9g1JwPx5T6xYRLeJoJny0kYMl0G0kkLpvvoJYIsSghwzW14HQhlOQa2n2liWfE9DvZpaFE8YNwZS8d4wyBFVnsuZjcgtVvLpLxnChuX6wmNebw== X-YMail-OSG: bRO.kFYVM1nCRh6lHp0rTsCUmXJzD._wpzq9xRuzUS1MoQqarYpX67YtE1bSO3U Z9eYenO.mtFHfDC_26THzrWIsN8KKaMqMvN0eqH6EK5kwvTGtJpvP37BBvsP5VmocRVJUxIe6b8w Aohsrz5u1mFXxCjZdI93kuQrOEJEmuLD8hux0alt_7YzbfD3cog5e1tLGzzq5Fo1iXMWC595VN0a 3V85joqLjqYIWcyYi8Qc7KUWHLk4oG1SJG803boDcWfiMUJh8I9eqHHA8dzjdhtxkOoF3E3EPpOQ 7pJcdRuj5HSAXBiO.ivouWJ1kb_Z3vVz6WCp_XNoxLvdcBO6DikPw.E0sharHenngSO2Iv8oMPzF z2wtpp1DymacYvbbcUqQYm9MKBl06jP2C2ycyQViJ1VhSVbSMDDA0HLFDw5PoKpGEUhU2UIEcsIF S3rizo_DWTua3wyhV7cXv37H_40RmFUjBXqIidc95aJZaj45lbShFgs6YmpuVVWqiuImsxeeVqrr uSkCXlN3iEMbS2St6J3haE5gU8_YExB9B1o4OQURiAw96NPzwuAH8Qo3EtM9MUAD4ajpi38pei2n mDJtbGLoWXXr270ISAQc3KV0Kuam.BDpZ_9ZfGU1_sJw3Q6j2hI6gQ7psqRB4bNLQ6zzq8Vtn2ct k0MSZHHaOZiF7.jkMWz3.d4XysSjWbVkCN_6k8kFT7EIGCFwUgDkeZk1sEAhG9SVomYdZLEqeMgo xaUS0UkTxZRNPo3p0x0jrP0w1gzTobAttGmU91xx88GNlg_X9jShWogcKbBYJyWR6fWj1knRW4iV r3NqUQ.QvRA1P1VfjnIKqTTxFYxozibti5msJiLPnCrYH4M8ho9qWPVo2YgJtPWdpf0S.In38uZ5 yspvir_RUZr4JqdiFR0pHv4pqipqFAHoIxMQvhe_QYUAoHTcgRhWXpzfcYTB0E9iQ.dv5tzK6NyJ eL43rzcSobzCpm4vCrFTz3sckc_4iYJnAnww4xCm2S4CcT840IfT6cgXztvD4S2zNrzu6hzPmM7P FgwoVANyOZ3UF6Pl3HgIrpFJrN6Wl.S5iQPs7kzCL6h3mAfKWTk7Y45utqzzYeFyji9_9L1XDI5c l9qkn8qE3tvKq5r2SFnduVOX80UXIJ477OXolg54nv7iJK1OQ6n5pMD4xkwtwSTiF5injO97TFY. 5rftAoBgb_4uRYulTf4A0iAWNOSImLgDVmaBeCxoq7ipJTKkYNx6FGknY.xDSL8YZRAF2._nN69p Fpl61wrdAOvGTLcYfSSAUoGk0EYQWP16DMsODVzpCEkz5WMVKccFaBiDeKNhrTpuVtx8mwfni7J2 zq4vNqb_XuYSlmhHz8uxn8BE9cJmHddS4NmTEyWhhU7HSCZF6Gj6IQjKrQUmMPDMDWmAVe0TL0Lb al2UfQVSV7asmPYJARiGCQ.xisO4YDcTxgUmRXAfZzcnliXy_r8cE8hvS_jxNtfQu.SyWnWhENtQ IgZWqKeYy73wu7WYElhPi70sKa.vYyO4tgrFaAka6De8i9Gfqlg0WsPAspsIXEltjUhkQyBT4hjG FLmE7M5DseT8GfSmtFCEP.a.N7HcgvcFE1m3JIw8Ep5iA.M0r84sLid1nR69vZ1eLqdexEWd74fF a8tq3DjUAhuGRGzIIisTrHitUZxIOzPWZf68EfZ.dmxJlu4yrm1NKKvfdIOkSMHnCSPSJ0t9oFKc 2AhVwQM6qkD4WrBgLZ4QSHiwA1ptBsLUVnQI4uolOMf6Nvn6X_qTkTmdZIYzsVMXGzgY1AHbHvp. 5CDEX_07hbwH3cGTXZGtFjwr.CsAHaO4fYTcoKeLIylNiOuCYdr802OPQAABXPiDu74qK5Fb2LOq dAbjGhh7y8njBSPT3jwlbO0aE7kAvis.AVqHJGEOpdLWLxT8p6V8R2SXYXLYAY6kbL7RD5XEiXjh dxySln_G4ZO4xHx1U1dPoaQ8AledhEy9hmxE890DDXeRKuNShDuMRq0KtrW.dQBKp0o.rbhFsOab lbAbpxU7.3wAsie0rVFZcW6qJ1g5YJsCgT5pd5bCS23YgM4ua.cHucEV7fia3ZmCwuzmXA0_b5nJ fStpoSurTCMkw6Y9bsk7FFyUn0rEarqzzoY6G1_2beGMwhZ9PVhMG8QbIJRzQ0gH1moZm.ml5Ken CaFH7Fuf1MPRiuYKetZRtKhmQ8Gg8HFlH8sFARiF0Uc0PINcByk7mxL_MD30q9z8fKvEjR3R7SNv zOEEvuL9qSjeGj.gdhRNb1pQL1iqLgGX7VYr8hoGdEe191mwo2KUiQjk2gsPWzDWke1_59sWm4yj OeD60qqBdUr6iYsljEpGN0qohvVSWrgaTe.BrQ5pcaQ5QBB9kmQ-- X-Sonic-MF: X-Sonic-ID: 76d63488-b3ba-4bef-85e2-276b54b57ba5 Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.gq1.yahoo.com with HTTP; Tue, 21 Apr 2026 18:58:06 +0000 Received: by hermes--production-gq1-6dfcf9f8b-whkwz (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 09754b5a41b46fa11621ff07c84852e7; Tue, 21 Apr 2026 18:58:00 +0000 (UTC) Message-ID: <1913a8ad-b984-4496-b913-7e7d60d7dc56@yahoo.com> Date: Tue, 21 Apr 2026 11:57:59 -0700 List-Id: Packaging the FreeBSD base system List-Archive: https://lists.freebsd.org/archives/freebsd-pkgbase List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pkgbase@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: FreeBSD Errata Notice FreeBSD-EN-26:07.pkgbase [Some notes/reminders about pkgbase /usr/src content and such] To: freebsd-pkgbase@freebsd.org, "freebsd-stable@FreeBSD.org" References: <20260421170210.C2E6B1FE10@freefall.freebsd.org> Content-Language: en-US From: Mark Millard In-Reply-To: <20260421170210.C2E6B1FE10@freefall.freebsd.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Mailer: WebService/1.1.25559 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US] X-Rspamd-Queue-Id: 4g0WpG05GXz47k8 X-Spamd-Bar: ---- Since this one is about pkgbase contexts . . . On 4/21/26 10:02, FreeBSD Errata Notices wrote: > ============================================================================= > FreeBSD-EN-26:07.pkgbase Errata Notice > The FreeBSD Project > > Topic: Base packages fail to build with newer versions of libucl > > Category: core > Module: packages > Announced: 2026-04-21 > Affects: FreeBSD 15.0 > Corrected: 2026-04-07 11:27:02 UTC (stable/15, 15.0-STABLE) > 2026-04-21 15:44:26 UTC (releng/15.0, 15.0-RELEASE-p6) > > For general information regarding FreeBSD Errata Notices and Security > Advisories, including descriptions of the fields above, security > branches, and the following sections, please visit > . > > I. Background > > The libucl library is used for parsing documents in the UCL markup format. > The base system private Lua (flua) exposes libucl to Lua applications via > the "ucl" module. > > II. Problem Description > > In libucl version 0.9.3, an API change was made in the Lua ucl module > to prohibit the use of certain syntax by default, specifically the > ".include" directive. This change causes the base system package build > ("make update-packages") to fail when the host system is using libucl > 0.9.3 or later. > > III. Impact > > Future versions of FreeBSD, which include libucl 0.9.3 or later, will > be unable to build FreeBSD 15.0 base system packages from source. > > IV. Workaround > > No workaround is available. > > V. Solution > > Update the base system source tree to a supported FreeBSD stable or > release / security branch (releng) dated after the correction date. > > No action is required on the host (build) system. > > To update your system via a source code patch: > > The following patches have been verified to apply to the applicable > FreeBSD release branches. > > a) Download the relevant patch from the location below, and verify the > detached PGP signature using your PGP utility. > > # fetch https://security.FreeBSD.org/patches/EN-26:07/pkgbase.patch > # fetch https://security.FreeBSD.org/patches/EN-26:07/pkgbase.patch.asc > # gpg --verify pkgbase.patch.asc > > b) Apply the patch. Execute the following commands as root: > > # cd /usr/src If /usr/src is from a pkgbase install/upgrade, it is not set up for use with git. That is relevant later below. > # patch < /path/to/patch For folks that do not build their own pkgbase, normally the technique would be to do a normal binary pkgbase update. In this case, using aarch64 as an example context, if that activity included FreeBSD-src-sys and FreeBSD-src (at or later than shown below): FreeBSD-src-sys-15.snap20260421090558.pkg FreeBSD-src-15.snap20260421100537.pkg that should have updated to have source files were based on having had the patch applied. (Snapshot date/time naming will vary across platforms.) > > VI. Correction details > > This issue is corrected as of the corresponding Git commit hash in the > following stable and release branches: > > Branch/path Hash Revision > ------------------------------------------------------------------------- > stable/15/ 976b2ebf4309 stable/15-n282865 > releng/15.0/ f3bbb238daa1 releng/15.0-n281021 > ------------------------------------------------------------------------- > > Run the following command to see which files were modified by a > particular commit: > > # git show --stat /usr/src supplied by pkgbase does not have normal/easy traceability to git hashes so far as I know. (For example, establish a git comparison tree and then recursive diff that and the pkgbase /usr/src --ignoring git infrastructure files that are not in /usr/src/ .) For pkgbase's base_latest distributions (so: stable/15 based in this context) the git hash that would be accurate for /usr/src/sys/ (which has its own .pkg file) might not be an exact match to what would match all of the rest of /usr/src/ (which has its own .pkg file): a commit can occur between the two separate source grabs and make the two hashes distinct. (main also has this property.) Looking at the appropriate (say, * being aarch64): https://pkg.freebsd.org/FreeBSD:15:*/base_latest/?C=M&O=D can help confirm things are in place. Similarly for looking at appropriate base_latest rows in: https://people.freebsd.org/~dbaio/pkg-master-report.html For example: For a while after the announcements went out, freebsd:14:aarch64:64 in pkg-master-report's display showed as "missing" (20 for % Synched) when I looked. (Now it shows 100.) > > Or visit the following URL, replacing NNNNNN with the hash: > > > > To determine the commit count in a working tree (for comparison against > nNNNNNN in the table above), run: > > # git rev-list --count --first-parent HEAD > > VII. References > > The latest revision of this advisory is available at > > > -- === Mark Millard marklmi at yahoo.com