CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

ports-mgmt/pkg-devel 2.8.99.4

Package manager

Port info

Maintainer
pkg@FreeBSD.org
Packages
latest: 2.8.99.4
Upstream
up to date
Last update
to 2.8.99.4 · a5333163dc
Quarterly
2026Q4: 2.8.99.1
WWW
https://github.com/freebsd/pkg
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install pkg-devel
installs 2.8.99.4 from latest; from quarterly (2026Q4) 2.8.99.1
Port
# cd /usr/ports/ports-mgmt/pkg-devel && make install clean
# make -C /usr/ports/ports-mgmt/pkg-devel config  # change options first
Size
6.0 MiB download · 24 MiB installed
Depends on
nothing
License
BSD2CLAUSE
Options
1 of 2 on in the package: DOCS
Show the 1 options that are off
SAN

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.8.99.42.8.99.1–
FreeBSD 152.8.99.42.8.99.2–
FreeBSD 14✗2.8.99.1✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.8.99.12.8.99.1–
FreeBSD 142.8.99.12.8.99.12.8.99.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.8.99.4.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295389maintainer-feedback? ports-mgmt/pkg-devel: runs from cron simultaneously 9 hours and 7 hoursNew2026-05-20

Commits (366)

Baptiste Daroussin (bapt) · 1.16.99.4
Update to 1.16.99.4

Changes from 1.16.99.3 to 1.16.99.4
- expose the name of the packages to its scripts lua and shell
- plist: remove internal support for @*exec
- plist: remove support for @ignore
- plist: remove suppot for @dirrm/@dirrmtry
- plist: remove support for @pkgdep
- plist: remove stub support for @stopdaemon
- plist: remove stub support for @display
- plist: remove stub support for @mtree
- plist: remove stub support for @conflict
- info: fix info processing of mutliple compares
- ci runs again on linux and osx
- portability fixes for linux and osx
- ubsan/asan related fixes
aead23eee1
Baptiste Daroussin (bapt) · 1.16.99.3
update to 1.16.99.3:

The main big change is the switch of the package extension to .pkg
This is done so we can change compression format without having to
modify the tools each time to adapt to the new extension

While here adapt the ports tree to the new .pkg extension and prepare
the pkg-devel ports to swicth the package compression format to zstd
in FreeBSD 14 in a month to give time to upgrade to a version which
have the bootstrap knowing about .pkg.

Changes from 1.16.99.2 to 1.16.99.3
- lua update to 5.4.2
- pkg repo accept now all supported formats mixed without config
- pkg now default on creating .pkg files with backward compatible symlinks
- backward compatible symlinks are now an option
- make the default comprpession format a config option
- set the default compression level for zstd to 19
- make the default compression level a config option
- Update libucl to latest version
098b598e03
Emmanuel Vadot (manu) · 1.16.99.2
ports-mgmt/pkg-devel: Update to 1.16.99.2

- libpkg: rsa: stop leaking an RSA object
- libpkg: rsa: start abstracting away rsa bits
- lua: filecmp: Fix for symlink

PR:		253292, 250439
Approved by:	bapt (implicit)
ac74dfb6d5
Emmanuel Vadot (manu) · 1.16.99.1
ports-mgmt/pkg-devel: Update to 1.16.99.1

Changes from 1.15.99.8 to 1.16.99.1
- Avoid making making xstring.h public
- audit: fix quiet
- libpkg: add a snap(shot) version prefix
- libpkg: only upgrade installed packages with pattern matches
- libpkg: accept an "rsa:" prefixed file for pkg_finish_repo()

Approved by:	bapt (implicit)
2bb025fe90
Adam Weinberger (adamw) · 1.15.99.8
ports-mgmt/pkg: Update WWW

The pkg wiki entry (https://wiki.freebsd.org/pkgng) says "The content of this
page was outdated and misleading so it has been deleted." Instead, point to
the upstream github repo where truths about pkg can be found.

Approved by:	pkg (bapt)
011cbbbfb6
Baptiste Daroussin (bapt) · 1.15.99.8
Update to 1.15.99.8

- Update documentation about configuration options
- Fix variable expansion while parsing pkg.conf and repositories
- Fix scripts never ending on MacOS
- Do not execute post-install script if extraction fails
- Fix fetching of meta.conf if it is missing
- Update lua to lua 5.3.6
- Improve solver missing some reverse dependencies
- 'audit' now accept a -R/--raw option for parseable output
- 'audit' can now ignore packages based on use define globs or regexp
- 'set' now reports when a package provided in command line is not installed
- all commands are now consistently using --no-scritps instead of different
  flavor per commands
- when request to install many packages unavailable in the repo, print all the
  missing one instead of stop at the first one only
- 'info' now prints the timestamp and repository in the --raw output
- Improve error messaging when parsing the configuration file
- when upgrading in dry-run mode: stop first checking for pkg, but show all
  the packages to be upgraded, pkg included
- Fix crash when pkg is told to package a directory as a file
- 'create' now accept -e to create package with an expanded version of the
  manifest aka readable
- Relax keywords attributes syntax by allowing spaces
82b49d1468
Baptiste Daroussin (bapt) · 1.15.99.7
Update to 1.15.99.7

The main features is:
- implement triggers mechanism (both lua and shell)

Other changes:
- Merge keywords preinstall script into a single "prepackaging script"
- fix issues with script leaving process in the background
- fix an issue with metalog duplicated entries
- improve performances of pkg query -F
- get rid of sysexits
f821e6330c
Baptiste Daroussin (bapt) · 1.15.99.6
update to 1.15.99.6

Changes from 1.15.99.5 to 1.15.99.6
- lots of keywords improvements:
  * validation: lua script to validate the keyword line
  * deprecated: boolean to mark a keyword as deprecated
  * deprecation_message: message if deprecated
  * actions_script: script version of 'actions' in lua
  * lua scripts: now can have real arguments instead of
  pre-expended ones
45f62b8503
Baptiste Daroussin (bapt) · 1.15.99.5
Update to 1.15.99.5

changes:
- New feature: @include for plist
- internal only: remove utstring in favor of posix open_memstream
- plenty of small memory improvements
fe2ba86ba5
Baptiste Daroussin (bapt) · 1.15.99.4
Update to 1.15.99.4 - Fix build with non recent compilers
cbe35836d6
Baptiste Daroussin (bapt) · 1.15.99.3
pkg-devel: update to 1.15.99.3:

- Brings many fixes from the stable branch
- Add support for a new @include
e640316bdd
Baptiste Daroussin (bapt) · 1.15.99.2
pkg2ng is gone a while ago stop advising to use it
7b49f32a7f
Emmanuel Vadot (manu) · 1.15.99.2
ports-mgmt/pkg: Update to 15.99.2

query: Fix '%X' to include the file name and sum

Approved by:	bapt (implicit)
027224fdb8
Emmanuel Vadot (manu) · 1.15.99.1
ports-mgmt/pkg: Update to 1.15.99.1

Changes from 1.14.99.7 to 1.15.99.1
- Fix '%X' to not include the version

Approved by:	bapt (implicit)
9378118979
Emmanuel Vadot (manu) · 1.14.99.7
ports-mgmt/pkg-devel: Update to 1.14.99.7

- Default the OSVERSION check to false
- Fix some errors related to getpwname_r/getgrnam_r
- Add RISC-V ABI aliases
- Add '%X' to pkg-query, this print the internal package checksum

Approved by:	bapt
1e251233b7
Emmanuel Vadot (manu) · 1.14.99.6
ports-mgmt/pkg-devel: Update to 1.14.99.6

Changes from 1.14.99.5 to 1.14.99.6
- Run lua scripts before shell scripts
- unbreak build with -fno-common
d1254fbdd4
Emmanuel Vadot (manu) · 1.14.99.5
pkg-devel: Update to 1.44.99.5

Changes from 1.14.99.4 to 1.14.99.5
- Fix lua script during pkg_delete
- Return file type for lua_stat

Approved by:	bapt (implicit)
aee65e9eaf
Emmanuel Vadot (manu) · 1.14.99.4
pkg-devel: Update to 1.14.99.4

Changes from 1.14.99.3 to 1.14.99.4
- Add function to lua scripts:
  * Simple stat()
  * filecopy to copy a file preserving its attributes
  * filecmp to compare files
  * update sqlite to latest version
  * Add a new 'hash' mode to pkg repo to make repositories CDN friendly
  * Isolate transport protocol to be able to easily change implementations
    in the futur
  * Fix invalid json in even_pipe
  * lots of portability fixes

Approved by:	bapt (implicit)
54d61f44bf
Emmanuel Vadot (manu) · 1.14.99.3
Use correct DISTVERSION

Reported by:	lwshu
Approved by:	bapt (implicit)
eaa1697cfa
Emmanuel Vadot (manu) · 1.14.99.1_3
Update to 1.14.99.3

Changes from 1.14.99.2 to 1.14.99.3:
- Fix linking on FreeBSD

Approved by:	bapt (implicit)
183ae49b1d
Emmanuel Vadot (manu) · 1.14.99.1_2
Update to 1.14.99.2

Changes from 1.14.99.1 to 1.14.99.2:
- Fix hanging if a script spawn a process and
  it still run after the scripts finish
- Prevent potential hang with lua scripts
- For http mirror first try to get the list from the
  full path and then fallback on the root one if we
  didn't find anything.
- Add a debug message if obtaining the lock fails

Approved by:	bapt
2b1ca4156a
Xin LI (delphij) · 1.14.99.1_1
ports-mgmt/pkg-devel: Respect liblzma.pc if available.

Note that this is meant to be a temporary hack and will be reverted once the
freebsd/pkg have solved this in the build infrastructure.

PR:			200142
MFH:			2020Q2
Approved by:		portmgr (bapt over IRC)
Differential Revision:	https://reviews.freebsd.org/D25053
4b27270c14
Baptiste Daroussin (bapt) · 1.14.99.1
Update to 1.14.99.1

Changes from 1.13.99.7 to 1.14.99.1
- parallelize the run of the tests
- Fix VERSION_MINOR expansion
- Fix chflags tests
- Bring back pkg create -n but in a consistent way
- Improve build of sqlite
- Use mmap in sqlite
- Update sqlite to latest version
- Document pkg_create(3)
- Prepare the land for futur proof remote dependency handling
- Update usage of pkg set -A and pkg set -v
- Add pkg create -l (compression level)
05e3c21589
Baptiste Daroussin (bapt) · 1.13.99.7
pkg 1.13.99.7

Changes since 1.13.99.5:
- When backing up libraries, create a package 'compat-libraries'
  a4b64e6fin which the new libraries will be appended to and the version
  bumped each time a new library is backed up.
- Fix a regression with sometimes makes some keywords being ignored
  aka scripts not appended to the list of scripts)
- Fix ABI on DragonFly
- Fix fd being closed twice wen running shell scripts
027bfa3ee5
Baptiste Daroussin (bapt) · 1.13.99.5
Update to 1.13.99.5 - fix a memory allocation bug during package creation [1)

Reported by:	flo, antoine
94c97457c5
Baptiste Daroussin (bapt) · 1.13.99.4
Update to 1.13.99.4

- Fix detection of zstd compression support for libarchive
- Fix package creation on installed packages
- Update autosetup to the latest version
e5b25769be
Mathieu Arnold (mat) · 1.13.99.3
Ports MUST NOT set WITH_DEBUG.

WITH_DEBUG is a user facing variable.  When a user wants to build a port
with debugging symbols enabled, they either set WITH_DEBUG globally, or
WITH_DEBUG_PORTS+=category/port.

Approved by:	bapt
With hat:	portmgr
Differential Revision:	https://reviews.freebsd.org/D23940
b2dcd7927c
Baptiste Daroussin (bapt) · 1.13.99.3
Update to 1.13.99.3

- Fix regression in ABI detection (add regression tests about it)
- Fix regression concerning the timestamp of the packaged/installed file
  (add  regression tests about it)
bd2bae08d9
Antoine Brodin (antoine) · 1.13.99.2_1
Forbid the pkg-devel ports, it create 1 package with bad ABI

With hat:	portmgr
78e2a3f826
Baptiste Daroussin (bapt) · 1.13.99.2
Update to 1.13.99.2

Changes from 1.13.99.1 to 1.13.99.2
- Fix pkg fetch -o
- Implement a mechanism to autobackup libraries during upgrades (off by default)
- zsh-completion: disable repo update durign package retrival
- Improve documentation
- More variable are now expanded when reading the confirations files:
  * OSNAME: FreeBSD
  * RELEASE: 12.1
  * ARCH: amd64
  * VERSION_MAJOR (FreeBSD only)
  * VERSION_MINOR (FreeBSD only)
- Remove the unused and inconsistent pkg create -n
- Add -t timestamp to pkg create to be able to specify the expected file timestamp
  via command line.
- Refactor the pkg_create API and mark as deprecated the old functions
d15fea8367
Baptiste Daroussin (bapt) · 1.13.99.1
Update to 1.13.99.1

Changes from 1.13.99.0 to 1.13.99.1
- Do not create a .pkgnew file in case installing a configure file over
  a non existing file
- Update linenoise to latest version
- Update picosat to latest version
- Implement HTTP keep-alive (imported from xbps)
- fix a regression concerning valid url: ssh://user@host:/ was not valid
  anymore
8349ac105e
Baptiste Daroussin (bapt) · 1.13.99.0
Update to 1.13.99.0 - Fix inverted logic about rcscripts - Improve the build handling of dependency
33acfa449c
Baptiste Daroussin (bapt) · 1.12.99.4_1
Import the libfetch patch to the bundled libfetch
52a9e7116c
Baptiste Daroussin (bapt) · 1.12.99.4
Update to 1.22.99.4 - Document lua scripts - Document shell scripts - Document keywords ucl files - Add a variable to both lua scripts and shell script to allow   the scripts to know they are actually being upgrading things
d685189a88
Baptiste Daroussin (bapt) · 1.12.99.3
Update to 1.12.99.3 - Add more regression test - Improve consistency of the default ouput - Give a hint about running pkg update -f in case of "size mismatch" - Fix pkg backup since the sqlite syscall are overridden
d3d5b4fd47
Baptiste Daroussin (bapt) · 1.12.99.2
update to 1.12.99.2 - lua scripts are now running in a capsicum sandbox - lua scripts io.open function is now always opening relative to ROOTDIR - expat vulnxml parser has been replaced by a yxml based one - libucl has been update to the latest git version - error reporting has been improved when parsing vuxml file - shell script can now push message at the pkg-message level by writing   to the ${
9009b06bf6
Baptiste Daroussin (bapt) · 1.12.99.1
Update to 1.12.99.1 - When installing a file over a file that is not tracked by any   package, save the previous one as .pkgsave - Fix a chicken/egg problem with the meta being compressed and defining   the compression format. Now pkg repo will create a meta.conf file   uncompressed (it is small enough) and fallback on the old meta.txz.   Note that meta.txz is still created for backward compatibil
b948349c9b
Baptiste Daroussin (bapt) · 1.12.99.0
Release pkg 1.12.99.0

Changes from previous devel version:
- Fix crash with bad ABI is provided

Change in the port:
- Do not check anymore for pkg_tools migration to pkg
f37222f902
Baptiste Daroussin (bapt) · 1.11.99.3
Update to 1.11.99.3
de25685809
Baptiste Daroussin (bapt) · 1.11.99.2
Update to 1.11.99.2: - Fix cross installation with new build system - Add a function to lua_script allowing to send a message which will be   printed along with the other messages at the end of the message process. - Fix detection of libarchive with zstd support
b6e1d78e80
Mathieu Arnold (mat) · 1.11.99.1
Convert to UCL & cleanup pkg-message (categories [p-r])
d2f3167e02
Baptiste Daroussin (bapt) · 1.11.99.1
Update to 1.11.99.1

- Add support for lua scripting:
  for now it allows to use scripts in lua instead of shell scripts
  everywhere possible, including keywords.
- Fix detection of libarchive built with zstd support
f0edfd6e1b
Baptiste Daroussin (bapt) · 1.11.99.0
Release pkg 1.11.99.0

- add support for packages compress in zstandard format
- improve messages output adding marks to separate messages from each packages
  and messages within a given packages
- messages can now contain variables: ${PREFIX} ${PKGNAME} for now
d6c1c9d5eb
Baptiste Daroussin (bapt) · 1.10.99.14
Respect CC and PREFIX
0bb669f431
Baptiste Daroussin (bapt) · 1.10.99.14
Update to 1.10.99.14 - fix libpkg.so when linked with binutils - instead of closing stdin for script just use /dev/null - force installation of symlinks to avoid make install to fail is some   symlinks are already there
df17d35330
Baptiste Daroussin (bapt) · 1.10.99.13_2
Bump port revision
88b5baf67c
Baptiste Daroussin (bapt) · 1.10.99.13_1
Add a patch to not close stding but actually use /dev/null When running scripts
68f4e42bd9
Baptiste Daroussin (bapt) · 1.10.99.13_1
Really update to 1.10.99.13 Changes from pkg 1.10.99.12 to 1.10.99.13 - fix segfault when running pkg version <an_invalid_index_file> - fix segfault that can occurs sometime when forcing the installation of a   localpackage: pkg install -f ./mypkg-X.txz - fix abi detection when multiple elf notes are used in the binary like on   fedora

Reported by:	tobik, sunpoet
5018b514c8
Baptiste Daroussin (bapt) · 1.10.99.13
Update to 1.10.99.13
2880b8abbe
Baptiste Daroussin (bapt) · 1.10.99.11
Update to 1.10.99.12

Changes from pkg 1.10.99.11 to 1.10.99.12
- use /usr/bin/uname to determine of the ABI
- Add 3 new aliases:
  * rall-depends: showing depenencies of a non installed package
  * rcomment: showing only the comment of a non installed package
  * rdesc: showing only the description of a non installed package
- switch to cirrus-ci
- improve portability on linux
- simplify code to create the repository
- close stdin when running scripts
- update bundled libucl to latest version
- remove backward compat (pkg_*) in periodic scripts
- always use anticongersion on periodic scripts
- Prevent SIGSEGV with 'pkg version' with packaged base
- Fix issue with recent lld
f1860f7c9e