CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

ports-mgmt/pkg-devel 2.8.99.4

Package manager

Port info

Maintainer
pkg@FreeBSD.org
Packages
latest: 2.8.99.4
Upstream
up to date
Last update
to 2.8.99.4 · a5333163dc
Quarterly
2026Q4: 2.8.99.1
WWW
https://github.com/freebsd/pkg
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install pkg-devel
installs 2.8.99.4 from latest; from quarterly (2026Q4) 2.8.99.1
Port
# cd /usr/ports/ports-mgmt/pkg-devel && make install clean
# make -C /usr/ports/ports-mgmt/pkg-devel config  # change options first
Size
6.0 MiB download · 24 MiB installed
Depends on
nothing
License
BSD2CLAUSE
Options
1 of 2 on in the package: DOCS
Show the 1 options that are off
SAN

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.8.99.42.8.99.1–
FreeBSD 152.8.99.42.8.99.2–
FreeBSD 14✗2.8.99.1✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.8.99.12.8.99.1–
FreeBSD 142.8.99.12.8.99.12.8.99.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.8.99.4.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295389maintainer-feedback? ports-mgmt/pkg-devel: runs from cron simultaneously 9 hours and 7 hoursNew2026-05-20

Commits (366)

Baptiste Daroussin (bapt) · 1.10.99.11
Update to 1.10.99.11 which attempts to fix build with recent libarchive
a7091cda19
Baptiste Daroussin (bapt) · 1.10.99.10
Update to 1.10.99.10
351d44a02c
Mathieu Arnold (mat) · 1.10.99.9
Add DOCS options to ports that should have one.

Also various fixes related to said option.

PR:		230864
Submitted by:	mat
exp-runs by:	antoine
e1bfdfbe56
Ben Woods (woodsb02) · 1.10.99.9
Fix fetch by updating GH_TAGNAME as required by r479255

Approved by:	portmgr blanket
d247691573
Brad Davis (brd) · 1.10.99.9
Update to 1.10.99.9

- Remove a check for config files that have hardlinks
- Add .gitlab-ci.yml to support the Gitlab CI service
- Add a few more tests with hardlinks
caccd90e82
Baptiste Daroussin (bapt) · 1.10.99.8
Update to 1.10.99.8

Changes from pkg 1.10.99.7 to 1.10.99.8
- Add options to ignore OSVERSION check and document it
- Complain about RO filesystem for pkgdb access if needed
- Fix privileges drop done too early
- Improve OSVERSION check
- Fix some resource leaks
- Lots of documentation improvements
- Improve conflicts handling
- Do not check remote packages when doing `pkg upgrade -v`
- Convert from autotools to autosetup
- Fix warnings spotted by gcc 7+
- Fix pkg info -R to match the documented behaviour
- Update zsh completion
- Fix crash with config file handling
- pkg is now a semi static binary
a9644863f1
Dmitry Marakasov (amdmi3) · 1.10.99.7
- Update WWW

Approved by:	portmgr blanket
0e8e345651
Steve Wills (swills) · 1.10.99.7
Don't use pkg-static when cross building

PR:		224217
Submitted by:	nwhitehorn
Approved by:	bapt
cbee9380e1
Baptiste Daroussin (bapt) · 1.10.99.7
Update to 1.10.90.7 - Sort fts traversal in repo creation - Fix floating pint exception when packaging packages with weird elf files - More test cases for config merge - Fix running the testsuite on linux and osx - Fix pkg version regarding flavors - Add support for creating packages with a hash in their names - Accept DT_SONAME anywhere in .dynamic - make pkg version -r imply -R - Some fixes for
ed2b8cb729
Baptiste Daroussin (bapt) · 1.10.99.6
Update to 1.10.99.6 - Lots of fixes/improvements on periodic scripts - Fix typo in the .pc file - Only check for origin if the strings contains / in pkg version - Support flags when exporting the metalog - Ignore flags when installing as a user - fix again using pattern as package arch - recognize armv7 - add %q to pkg_printf(3) and pkg-query(8) to print altabi - add an extra line when printing pk
6b0fc35b39
Baptiste Daroussin (bapt) · 1.10.99.5
Update to 1.10.99.5 - pkg clean is now happy if the cache dir non existing - 410.pkg-audit now uses anticongestion on freebsd 12 - fix pkg install -r foo if foo is a disabled repository - fix elf handling on non FreeBSD - fix support for platforms without AT_SYMLINK_NOFOLLOW - fix dropping privileges on Linux - fix build with recent libbsd - fix duplicate pkg registration overwriting the existing
268b08b8c1
Baptiste Daroussin (bapt) · 1.10.99.4
Update to 1.10.99.4 - Fix signing_command something saving a truncated signature in the file   as a result pkg will reject any repository signed - pkg which: add -m to show what files matched using globs - fix sqlite overload with new sqlite - Revert the new UI which does not respect 80 columns - Fix query '%q' printing the internal arch instead of the official one
194470067a
Baptiste Daroussin (bapt) · 1.10.99.3
Update to 1.10.99.3 Changes - Replace some mmap with getline() - Fix pkg which -g - allow setting env before fetching for every kind of repo
f1bc69869a
Baptiste Daroussin (bapt) · 1.10.99.2
Update to 1.10.99.2 - Remove pkg2ng and pkg convert code - Emit dep_formula within the manifests - Use stack based read (32k buffer) instead of mmap - Use 32k buffers for each reads - Cache pw/group to reduce overreading nsswitch.conf - Update libucl and remove over call of getcwd
71a1feb6ee
Baptiste Daroussin (bapt) · 1.10.99.1
Update to 1.10.99.1 - The solver now uses natively the new dep formula (more works needed) - Ensure don't call getcwd for each manifest part (useful for the builders)
af3583134d
Baptiste Daroussin (bapt) · 1.9.99.11
Update to 1.9.99.11

- Fix install as user
- Allow to set env variable per repo to pass to libfetch
- Plug a memory leak
- Fix repo initialization when a repo is disabled
- Fix installing sparse binary files
- Add an option for a user to change locking over nfs
36ca5b2073
Ryan Steinmetz (zi) · 1.9.99.10
- Instruct portscout to ignore these
b76b458340
Baptiste Daroussin (bapt) · 1.9.99.10
Release to 1.9.99.10 (yes I forgot update the port for 1.9.99.9

- Fix symlinks created by pkg register
- Fix pkg version -n
- Do not autoremove packages marked as vital
- pkg query: aggregate license information
- Fix build on OSX
- Fix build on FreeBSD 8
- Implement pkg upgrade --vulnerable
- Fix descriptor leak
230e423e23
Baptiste Daroussin (bapt) · 1.9.99.8
Update to 1.9.99.8 - bug fixes and simplification of pkg register
a4de3b025a
Baptiste Daroussin (bapt) · 1.9.99.7
Update to 1.9.99.7 changes: - pkg register: fix timestamps
72ec8d3ea7
Baptiste Daroussin (bapt) · 1.9.99.6
Update to 1.9.99.6 - Fix pkg register when target hardlink is not in the same directory as the source file
dc2eb94047
Baptiste Daroussin (bapt) · 1.9.99.5
Update to 1.9.99.5 - In case of errors during pkg update exit with a non 0 status - Fix pkg register issues with some version of libarchive:   * hardlinks not being made hardlinks sometime   * issues when PREFIX is a symlink to another directory - Use portable mechanism to find the number of CPUs which allows pkg repo to be   faster on linux
2895a58be0
Steve Wills (swills) · 1.9.99.4
Rename PKG_CMD to PKG_REGISTER

Submitted by:	bapt
Differential Revision:	https://reviews.freebsd.org/D8677
7f220fd3ff
Baptiste Daroussin (bapt) · 1.9.99.4
Update to 1.9.99.4: - Add progress when fetching (number of files to fetch) - Improved messages about locked packages - Return 1 when a user rejects the proposed plan - When dealing with configuration files '@config' never overwrites non tracked files - Warn everyone about deprecation of @dirrm and @exec - Deduplicate metadata loading code - pkg register now understands context aware messages
3bedd80422
Baptiste Daroussin (bapt) · 1.9.99.3
Update to pkg 1.9.99.3 - Add a fallback for utimensat when reporting EOPNOTSUPP - replace libsbuf with utstring for portability - Overwrite some sqlite vfs functions to allow capsicumisation of pkg - move more pkg audit details into the library - allow to run pkg query without any privileges - extend the audit periodic script to report deprecated packages - Fix fd leak to rcscripts - stop dropping
f96ddf0ed1
Baptiste Daroussin (bapt) · 1.9.99.2
Update to 1.9.99.2 - readd FTS support to sqlite lib to allow dropping fts tables - rewrite some functions to use file descriptors when possible
b1f3b90389
Baptiste Daroussin (bapt) · 1.9.99.1
Update to 1.9.99.1 - Fix fd leak on systems without utimensat (merged in release branch) - Do not use openssl for sha256 - Improve the default output when fetching data - Update libfetch to the version of FreeBSD 11 - Update libsbuf to the version of FreeBSD 11 - Fix NetBSD ABI - Add a fallback for utimensat when reporting EOPNOTSUPP
39bf209dc3
Baptiste Daroussin (bapt) · 1.9.99.0
Update to 1.9.99.0 - Fix pkg refetching te repositories all the time - Add support for METALOG
56a7235107
Baptiste Daroussin (bapt) · 1.8.99.11
Update to 1.8.99.1 - removes chroot in sanboxes it causes too many issues

Reported by:	kwm, bdrewery
987ab62e4a
Baptiste Daroussin (bapt) · 1.8.99.10
Update to 1.8.99.10 - sandboxes always drops privileges if run as root and chroot in /var/empty - sandboxes limits resource usage to make them less useless on system without capsicum - drops privileges and chroot to /var/empty in various commands if run as root:   * pkg audit   * pkg info   * pkg (r)query
4f321f2fba
Baptiste Daroussin (bapt) · 1.8.99.9
Update to 1.8.99.9: - Update internal expat to 2.2.0 - Fix using an external solver - Fix build on FreeBSD prior to 9.2 - Fix issues on armv6 - Add a mini summary of the operations (removal, installation, upgrades) that   that will be done - Fix solver issues that could trigger issues with conflicts or reinstall too   many things
b0ba98cf02
Baptiste Daroussin (bapt) · 1.8.99.8
Update to 1.8.99.8 - Accept symlinks to directory when the package expects a directory - Cleanup symlink checksuming code - Fix a bug that results in bus error on very specific cases with lots of   packages installed
7394e77926
Baptiste Daroussin (bapt) · 1.8.99.7
Update to 1.8.99.7 - Lots of important fixes in the solver - Fix pkg upgrade -f - Reduce namecache contention a bit - Prefix all temporary files with a . so they are hidden - Explicitly tell the users which conflicts were found - Do not fork pkg when being ptraced (only on FreeBSD) - Implement repo pinning so once installed a package will keep coming from a   given repo - Fix repository priority h

Big thanks az@ and vsevolod@ for the thank less help provided
4702f4204a
Baptiste Daroussin (bapt) · 1.8.99.6
Update to 1.8.99.6 Changes: - fix solver deciding to reinstall the reverse dependencies - fix mirror_type: http with https url
f1eb32fd9b
Baptiste Daroussin (bapt) · 1.8.99.5
Update to 1.8.99.5 Changes: - Fix: make http mirror type respect the specified port - Fix: chown/chmod on linux - Fix: pkg ssh - Update libucl to latest version - Reduce adherence on openssl
46cd1f14f3
Baptiste Daroussin (bapt) · 1.8.99.4
update to 1.8.99.4 Changes: - Fix checks for duplicates in the universe chains (multirepo)
4cd51edc85
Baptiste Daroussin (bapt) · 1.8.99.3
Update to 1.8.99.3 Changes: - fix some memory issues found with -fsanitize=address
27160e884a
Baptiste Daroussin (bapt) · 1.8.99.2
Update to 1.8.99.2 Changes: - improvements in the solver regarding multirepo - fix setting time on pre POSIX 2008 systems (such as freebsd 8) - fix running pkg when FD 0 has been closed
16f24225c6
Baptiste Daroussin (bapt) · 1.8.99.1
Update to 1.8.99.1 Changes: - Reduce memory used while analysing elf files - Stop checking pre-deinstall script except if DEVELOPER=yes is set - fix double free in pkg updating
fbcd69b81a
Baptiste Daroussin (bapt) · 1.8.99.0
Release pkg 1.8.0

New features:
- new vital flag that prevent from removing a package with pkg delete when not specifying -f
- upgrade process now has atomicity per packages meaning now we can safely check the return of the pre* scripts
- handle ctrl-c during upgrade/install/update
- solver improvements
- pkg clean now runs in a capsicum sandbox on supported plateforms

Changes:
- pkg delete now fails if one tries to delete it (the pkg package) without -f. Before it was just warning and skipping it
- pkg install --from-root has been renamed pkg install --recursive to avoir confusion

Fixes:
- correctly handle hardlinked setuid files
- better handling of setuid
- fix elf analysis when some bad libraries have SONAME specified by empty
- fix elf analysis when a binary provides elf_notes but not the expected ones and are still valid freebsd binaries
  (this fixes the case when libgdk_pixbuf was not found as a provided lib on i386)
- NAMESERVER option is now working again and inputs are better checked
- lots of bug fixes: potential leaks mostly
e55afefa90
Baptiste Daroussin (bapt) · 1.7.99.11
Reroll the tar file it was badly created
e91ee36b41
Baptiste Daroussin (bapt) · 1.7.99.11
Update to 1.7.99.11 Changes: - ensure pre-install script failing are making the install process fail - do not try to set attributes on directories if they already have the proper attributes
82f863985d
Baptiste Daroussin (bapt) · 1.7.99.10
Update to 1.7.99.10 Changes: - Do not fail in case timestamps cannot be set on a directory - Fix issue that can lead to some libraries not being provided - Updates in pkg-repo(8)
f2cfee8083
Baptiste Daroussin (bapt) · 1.7.99.9
Update to 1.7.99.9 Changes: - rename install --from-root into install --recursive to avoid confusions - cleanup old packages later which reduces the window when the filesystem is "unstable" - fix issue with recursive deps when using pkg add
0cc8b577a0
Baptiste Daroussin (bapt) · 1.7.99.8
Update to 1.7.99.8 Changes: - run post install scripts a bit later to ensure all the new files are in place - fix a fd leak when extracting files
edc0dc7842
Baptiste Daroussin (bapt) · 1.7.99.7
Update to 1.7.99.7 Changes: - bug fixes after capsicumization of pkg clean - improved a bit the output of pkg fetch to make it more understandable
42dc37945a
Baptiste Daroussin (bapt) · 1.7.99.6
Update to 1.7.99.6 Changes: - Fix a regression on systems wihtout utimensat(2) - Revert a behaviour change with rootdir and repositories that   appeared to be more painful for users than helpful - Fix pkg clean removing /var/cache/pkg if it is a symlink - capsicumize pkg clean - make pkg clean remove empty directories
01cd57f515
Baptiste Daroussin (bapt) · 1.7.99.5
Update to 1.7.99.5 Fix regression on hardlinks and setuid

Reported by:	gjb
05606229ae
Baptiste Daroussin (bapt) · 1.7.99.4
Fix a regression regarding extraction of symlinks (regression tests added)

Reported by:	gjb
9b7bfdb5ca
Baptiste Daroussin (bapt) · 1.7.99.3
Update to 1.7.99.3 Revert 2 fixes that were actually coverity false positives
ba64112eae