pfSense pkg upgrade

Lately there has been some conversations about update/upgrades within pfSense.

Today I discovered a good example. The pfSense GUI does not show any available updates under System > Package Manager.

However, when I connect to pfSense via SSH, and run ‘pkg upgrade’ I get this output…

All repositories are up to date.
Checking for upgrades (4 candidates): 100%
Processing candidates (4 candidates): 100%
The following 4 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:

  • bind-tools: 9.16.11 → 9.16.12 [pfSense]*
  • unbound: 1.13.0_2 → 1.13.1 [pfSense]*

Installed packages to be REINSTALLED:

  • pfSense-pkg-Avahi-2.1_1 [pfSense] (ABI changed: ‘freebsd:11:x86:64’ → ‘freebsd:12:x86:64’)*
  • pfSense-pkg-Service_Watchdog-1.8.7_1 [pfSense] (ABI changed: ‘freebsd:11:x86:64’ → ‘freebsd:12:x86:64’)*

Number of packages to be upgraded: 2
Number of packages to be reinstalled: 2

I guess it’s good to check the GUI and the CLI?

The pgk system only pulls from their repository and sometimes they have updates there to fix specific issues such as recent unbound problem. It was also used a few years back to fix an issue an issue in NGINX

Unfortunately through the pfSense forum on reddit, I don’t think the unbound errors are exactly fixed yet. Any idea how widespread the unbound issues are or their usage cases.

I’m seeing unbound crashes 3-4 times a day. I’ll look into reporting this to Netgate. They need to know about it.