Update to 1.10.99.11 which attempts to fix build with recent libarchivea7091cda19
pkg -- vulnerability in libfetchentered 2020-01-29
Package manager
# pkg install pkg-develinstalls 2.8.99.4 from latest; from quarterly (2026Q4) 2.8.99.1# cd /usr/ports/ports-mgmt/pkg-devel && make install clean# make -C /usr/ports/ports-mgmt/pkg-devel config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.8.99.4 | 2.8.99.1 | – |
| FreeBSD 15 | 2.8.99.4 | 2.8.99.2 | – |
| FreeBSD 14 | ✗ | 2.8.99.1 | ✗ |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.8.99.1 | 2.8.99.1 | – |
| FreeBSD 14 | 2.8.99.1 | 2.8.99.1 | 2.8.99.1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 2.8.99.4.| PR | Summary | Status | Changed |
|---|---|---|---|
| 295389 | maintainer-feedback? ports-mgmt/pkg-devel: runs from cron simultaneously 9 hours and 7 hours | New | 2026-05-20 |
Update to 1.10.99.11 which attempts to fix build with recent libarchivea7091cda19
Update to 1.10.99.10351d44a02c
Add DOCS options to ports that should have one. Also various fixes related to said option. PR: 230864 Submitted by: mat exp-runs by: antoinee1bfdfbe56
Fix fetch by updating GH_TAGNAME as required by r479255 Approved by: portmgr blanketd247691573
Update to 1.10.99.9 - Remove a check for config files that have hardlinks - Add .gitlab-ci.yml to support the Gitlab CI service - Add a few more tests with hardlinkscaccd90e82
Update to 1.10.99.8 Changes from pkg 1.10.99.7 to 1.10.99.8 - Add options to ignore OSVERSION check and document it - Complain about RO filesystem for pkgdb access if needed - Fix privileges drop done too early - Improve OSVERSION check - Fix some resource leaks - Lots of documentation improvements - Improve conflicts handling - Do not check remote packages when doing `pkg upgrade -v` - Convert from autotools to autosetup - Fix warnings spotted by gcc 7+ - Fix pkg info -R to match the documented behaviour - Update zsh completion - Fix crash with config file handling - pkg is now a semi static binarya9644863f1
- Update WWW Approved by: portmgr blanket0e8e345651
Don't use pkg-static when cross building PR: 224217 Submitted by: nwhitehorn Approved by: baptcbee9380e1
Update to 1.10.90.7 - Sort fts traversal in repo creation - Fix floating pint exception when packaging packages with weird elf files - More test cases for config merge - Fix running the testsuite on linux and osx - Fix pkg version regarding flavors - Add support for creating packages with a hash in their names - Accept DT_SONAME anywhere in .dynamic - make pkg version -r imply -R - Some fixes fored2b8cb729
Update to 1.10.99.6 - Lots of fixes/improvements on periodic scripts - Fix typo in the .pc file - Only check for origin if the strings contains / in pkg version - Support flags when exporting the metalog - Ignore flags when installing as a user - fix again using pattern as package arch - recognize armv7 - add %q to pkg_printf(3) and pkg-query(8) to print altabi - add an extra line when printing pk6b0fc35b39
Update to 1.10.99.5 - pkg clean is now happy if the cache dir non existing - 410.pkg-audit now uses anticongestion on freebsd 12 - fix pkg install -r foo if foo is a disabled repository - fix elf handling on non FreeBSD - fix support for platforms without AT_SYMLINK_NOFOLLOW - fix dropping privileges on Linux - fix build with recent libbsd - fix duplicate pkg registration overwriting the existing268b08b8c1
Update to 1.10.99.4 - Fix signing_command something saving a truncated signature in the file as a result pkg will reject any repository signed - pkg which: add -m to show what files matched using globs - fix sqlite overload with new sqlite - Revert the new UI which does not respect 80 columns - Fix query '%q' printing the internal arch instead of the official one194470067a
Update to 1.10.99.3 Changes - Replace some mmap with getline() - Fix pkg which -g - allow setting env before fetching for every kind of repof1bc69869a
Update to 1.10.99.2 - Remove pkg2ng and pkg convert code - Emit dep_formula within the manifests - Use stack based read (32k buffer) instead of mmap - Use 32k buffers for each reads - Cache pw/group to reduce overreading nsswitch.conf - Update libucl and remove over call of getcwd71a1feb6ee
Update to 1.10.99.1 - The solver now uses natively the new dep formula (more works needed) - Ensure don't call getcwd for each manifest part (useful for the builders)af3583134d
Update to 1.9.99.11 - Fix install as user - Allow to set env variable per repo to pass to libfetch - Plug a memory leak - Fix repo initialization when a repo is disabled - Fix installing sparse binary files - Add an option for a user to change locking over nfs36ca5b2073
- Instruct portscout to ignore theseb76b458340
Release to 1.9.99.10 (yes I forgot update the port for 1.9.99.9 - Fix symlinks created by pkg register - Fix pkg version -n - Do not autoremove packages marked as vital - pkg query: aggregate license information - Fix build on OSX - Fix build on FreeBSD 8 - Implement pkg upgrade --vulnerable - Fix descriptor leak230e423e23
Update to 1.9.99.8 - bug fixes and simplification of pkg registera4de3b025a
Update to 1.9.99.7 changes: - pkg register: fix timestamps72ec8d3ea7
Update to 1.9.99.6 - Fix pkg register when target hardlink is not in the same directory as the source filedc2eb94047
Update to 1.9.99.5 - In case of errors during pkg update exit with a non 0 status - Fix pkg register issues with some version of libarchive: * hardlinks not being made hardlinks sometime * issues when PREFIX is a symlink to another directory - Use portable mechanism to find the number of CPUs which allows pkg repo to be faster on linux2895a58be0
Rename PKG_CMD to PKG_REGISTER Submitted by: bapt Differential Revision: https://reviews.freebsd.org/D86777f220fd3ff
Update to 1.9.99.4: - Add progress when fetching (number of files to fetch) - Improved messages about locked packages - Return 1 when a user rejects the proposed plan - When dealing with configuration files '@config' never overwrites non tracked files - Warn everyone about deprecation of @dirrm and @exec - Deduplicate metadata loading code - pkg register now understands context aware messages3bedd80422
Update to pkg 1.9.99.3 - Add a fallback for utimensat when reporting EOPNOTSUPP - replace libsbuf with utstring for portability - Overwrite some sqlite vfs functions to allow capsicumisation of pkg - move more pkg audit details into the library - allow to run pkg query without any privileges - extend the audit periodic script to report deprecated packages - Fix fd leak to rcscripts - stop droppingf96ddf0ed1
Update to 1.9.99.2 - readd FTS support to sqlite lib to allow dropping fts tables - rewrite some functions to use file descriptors when possibleb1f3b90389
Update to 1.9.99.1 - Fix fd leak on systems without utimensat (merged in release branch) - Do not use openssl for sha256 - Improve the default output when fetching data - Update libfetch to the version of FreeBSD 11 - Update libsbuf to the version of FreeBSD 11 - Fix NetBSD ABI - Add a fallback for utimensat when reporting EOPNOTSUPP39bf209dc3
Update to 1.9.99.0 - Fix pkg refetching te repositories all the time - Add support for METALOG56a7235107
Update to 1.8.99.1 - removes chroot in sanboxes it causes too many issues Reported by: kwm, bdrewery987ab62e4a
Update to 1.8.99.10 - sandboxes always drops privileges if run as root and chroot in /var/empty - sandboxes limits resource usage to make them less useless on system without capsicum - drops privileges and chroot to /var/empty in various commands if run as root: * pkg audit * pkg info * pkg (r)query4f321f2fba
Update to 1.8.99.9: - Update internal expat to 2.2.0 - Fix using an external solver - Fix build on FreeBSD prior to 9.2 - Fix issues on armv6 - Add a mini summary of the operations (removal, installation, upgrades) that that will be done - Fix solver issues that could trigger issues with conflicts or reinstall too many thingsb0ba98cf02
Update to 1.8.99.8 - Accept symlinks to directory when the package expects a directory - Cleanup symlink checksuming code - Fix a bug that results in bus error on very specific cases with lots of packages installed7394e77926
Update to 1.8.99.7 - Lots of important fixes in the solver - Fix pkg upgrade -f - Reduce namecache contention a bit - Prefix all temporary files with a . so they are hidden - Explicitly tell the users which conflicts were found - Do not fork pkg when being ptraced (only on FreeBSD) - Implement repo pinning so once installed a package will keep coming from a given repo - Fix repository priority h Big thanks az@ and vsevolod@ for the thank less help provided4702f4204a
Update to 1.8.99.6 Changes: - fix solver deciding to reinstall the reverse dependencies - fix mirror_type: http with https urlf1eb32fd9b
Update to 1.8.99.5 Changes: - Fix: make http mirror type respect the specified port - Fix: chown/chmod on linux - Fix: pkg ssh - Update libucl to latest version - Reduce adherence on openssl46cd1f14f3
update to 1.8.99.4 Changes: - Fix checks for duplicates in the universe chains (multirepo)4cd51edc85
Update to 1.8.99.3 Changes: - fix some memory issues found with -fsanitize=address27160e884a
Update to 1.8.99.2 Changes: - improvements in the solver regarding multirepo - fix setting time on pre POSIX 2008 systems (such as freebsd 8) - fix running pkg when FD 0 has been closed16f24225c6
Update to 1.8.99.1 Changes: - Reduce memory used while analysing elf files - Stop checking pre-deinstall script except if DEVELOPER=yes is set - fix double free in pkg updatingfbcd69b81a
Release pkg 1.8.0 New features: - new vital flag that prevent from removing a package with pkg delete when not specifying -f - upgrade process now has atomicity per packages meaning now we can safely check the return of the pre* scripts - handle ctrl-c during upgrade/install/update - solver improvements - pkg clean now runs in a capsicum sandbox on supported plateforms Changes: - pkg delete now fails if one tries to delete it (the pkg package) without -f. Before it was just warning and skipping it - pkg install --from-root has been renamed pkg install --recursive to avoir confusion Fixes: - correctly handle hardlinked setuid files - better handling of setuid - fix elf analysis when some bad libraries have SONAME specified by empty - fix elf analysis when a binary provides elf_notes but not the expected ones and are still valid freebsd binaries (this fixes the case when libgdk_pixbuf was not found as a provided lib on i386) - NAMESERVER option is now working again and inputs are better checked - lots of bug fixes: potential leaks mostlye55afefa90
Reroll the tar file it was badly createde91ee36b41
Update to 1.7.99.11 Changes: - ensure pre-install script failing are making the install process fail - do not try to set attributes on directories if they already have the proper attributes82f863985d
Update to 1.7.99.10 Changes: - Do not fail in case timestamps cannot be set on a directory - Fix issue that can lead to some libraries not being provided - Updates in pkg-repo(8)f2cfee8083
Update to 1.7.99.9 Changes: - rename install --from-root into install --recursive to avoid confusions - cleanup old packages later which reduces the window when the filesystem is "unstable" - fix issue with recursive deps when using pkg add0cc8b577a0
Update to 1.7.99.8 Changes: - run post install scripts a bit later to ensure all the new files are in place - fix a fd leak when extracting filesedc0dc7842
Update to 1.7.99.7 Changes: - bug fixes after capsicumization of pkg clean - improved a bit the output of pkg fetch to make it more understandable42dc37945a
Update to 1.7.99.6 Changes: - Fix a regression on systems wihtout utimensat(2) - Revert a behaviour change with rootdir and repositories that appeared to be more painful for users than helpful - Fix pkg clean removing /var/cache/pkg if it is a symlink - capsicumize pkg clean - make pkg clean remove empty directories01cd57f515
Update to 1.7.99.5 Fix regression on hardlinks and setuid Reported by: gjb05606229ae
Fix a regression regarding extraction of symlinks (regression tests added) Reported by: gjb9b7bfdb5ca
Update to 1.7.99.3 Revert 2 fixes that were actually coverity false positivesba64112eae