CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

ports-mgmt/pkg-devel 2.8.99.4

Package manager

Port info

Maintainer
pkg@FreeBSD.org
Packages
latest: 2.8.99.4
Upstream
up to date
Last update
to 2.8.99.4 · a5333163dc
Quarterly
2026Q4: 2.8.99.1
WWW
https://github.com/freebsd/pkg
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install pkg-devel
installs 2.8.99.4 from latest; from quarterly (2026Q4) 2.8.99.1
Port
# cd /usr/ports/ports-mgmt/pkg-devel && make install clean
# make -C /usr/ports/ports-mgmt/pkg-devel config  # change options first
Size
6.0 MiB download · 24 MiB installed
Depends on
nothing
License
BSD2CLAUSE
Options
1 of 2 on in the package: DOCS
Show the 1 options that are off
SAN

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.8.99.42.8.99.1–
FreeBSD 152.8.99.42.8.99.2–
FreeBSD 14✗2.8.99.1✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.8.99.12.8.99.1–
FreeBSD 142.8.99.12.8.99.12.8.99.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.8.99.4.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
295389maintainer-feedback? ports-mgmt/pkg-devel: runs from cron simultaneously 9 hours and 7 hoursNew2026-05-20

Commits (366)

Baptiste Daroussin (bapt) · 1.7.99.2
Update to 1.7.99.2 (aka 1.8.0 rc1) Changes: - Complete refactor of the package extraction:   * safer: ensure that only what is in the plist is actually extracted   * ensure the package can be properly on the filesystem before actually     replacing the files   * move atomicity to the package level meaning that in case of failure only     the non upgraded packages has to be proceed not the entire u
3c04e9b8da
Baptiste Daroussin (bapt) · 1.7.99.1
Update to 1.7.99.1 (same as 1.7.2)

Changes:
- pkg asks again for small operations (regression)
- fix pkg auto upgrade mechanism (regression test added)
- Update libucl to latest version which fixes an issue with empty pkg.conf (regression test added)
- pkg install on an already installed package returns 0 again this regression was introduced when fixing pkg lock (regression test added)
69d1bc306a
Baptiste Daroussin (bapt) · 1.7.99.0
Update to 1.7.99.0 Changes: - Improved automatic recover from SAT solver problems (same as in 1.7.0)
2bdb3d66f3
Baptiste Daroussin (bapt) · 1.6.99.6
Update to 1.6.99.6 Changes: - Add a basic automatic resolution plan for unsatisiable SAT problems - Fix regression in pkg info -R - Add a mechanism to finding libs when packaging base - Fix some warnings on arm - Fix hardlink extraction with --rootdir - Improved error reporting - Update libucl - Fixes on locked package handling - Add ip_version in pkg -vv output - Add !~ in pkg query (negated glob
02702cf90a
Baptiste Daroussin (bapt) · 1.6.99.5
Update to 1.6.99.5 Changes: - turn libfetch into verbose when pkg is run is debug mode - remove all mention of MTREE_DIRS in documentations - update libfetch to the latest version from HEAD - Fix segfault with HTTP_USER_AGENT is empty - Fall back to the default user agent if the provided on is empty - Fix segfault when bad url are provided in the repository configurations - Fix error reporting whe
98e958d003
Baptiste Daroussin (bapt) · 1.6.99.4
Remove cruft
2aacc381d2
Baptiste Daroussin (bapt) · 1.6.99.4
Update to 1.6.99.4 Changes: - Fixes ABI incompatibilities between libarchive 2.8 and libarchive 3+
3a3aabbe1a
Baptiste Daroussin (bapt) · 1.6.99.3
Update to 1.6.99.3 Changes: - list of valid url scheme can be defined in pkg.conf - add support for SOURCE_DATE_EPOCH for reproducible builds - Fix pkg check -d - Fix testsuite with kyua 0.12 - Fix pkg info -R - Fix setting modes on extracted files/directories - Fix zsh completion for pkg info -l - Fix some solver crashed - Initial attempt at fixing infinite loop on multirepositorry when updating
a1da9447e4
Baptiste Daroussin (bapt) · 1.6.99.2
Update to 1.6.99.2 Changes: - Fix cross building - Wording fixes - Always restore credentials after extraction in preparation for bigger changes - Improve zsh completion - Update libucl to the latest version - Added support for OpenBSD/Bitrig - Add a latest fixes to kill origin usage - Improved linux support - More user friendly error messages - Fixes in the solver: Treat dependencies missed as er
7447ff8c9d
Baptiste Daroussin (bapt) · 1.6.99.1
Release pkg 1.6.99.1 Changes: - Fix a regression in performance when listing files [1] - Remove references to EOLed FreeBSD version in manpages
3c7dd2add8
Baptiste Daroussin (bapt) · 1.6.99.0
Update to 1.6.99.0 Changes: - Document @{pre,post}[un]exec
3e4b4d0817
Baptiste Daroussin (bapt) · 1.5.99.13
Update to pkg 1.5.99.13 aka 1.6.0 rc3 Changes: - Important fixes in the solver (fixes the jpeg->jpeg-turbo issue) - +DISPLAY can now be a ucl file (contextual messages) - pkg info -D now understand ucl format - keywords can now define messages to be printed (depending on the context) - PKG_ROOTDIR is now always set in scripts (default to /) - pkg version now accept -n <pkgname> to check a given pa
89f5b5512e
Baptiste Daroussin (bapt) · 1.5.99.12
Update to 1.5.99.12 (aka 1.6.0 rc1) Changes: - Restore ordering of files and directories - Simplify regression test framework - Silence `pkg upgrade -q' when there are no packages to upgrade.
8950b41433
Baptiste Daroussin (bapt) · 1.5.99.11
Update to 1.5.99.11 Changes: - Fix 3 way merge - Properly apply credentials on merged files (@config)
ba11c55ba7
Baptiste Daroussin (bapt) · 1.5.99.10
Update to 1.5.99.10 Changes: Fix signature pubkey which was: 1/ broken 2/ backward incompatible. Allow to not use ldns on Linux Improve build on linux Fix corruption on @config files Fix @config files extraction when parent directories does not exists
2ec4008ed0
Baptiste Daroussin (bapt) · 1.5.99.9
1.5.99.9 Changes: - Allow to emit dot graphs from the solver (-o DOT_FILE=afile) - Update bundled libucl - Fix bus error intorduced in 1.5.99.8 - Fix forward compatibility
332cb55e20
Baptiste Daroussin (bapt) · 1.5.99.8
Update to 1.5.99.8 Changes: - Fix endless cycle of reinstall/deinstall of packages - Reduce a bit memory usage - New context aware messages (only show a message depending on where you are upgrading from) - Fix a bug about pkg messages not being properly decoded - Reduce code duplication
d70ee20ba8
Mathieu Arnold (mat) · 1.5.99.7
Remove UNIQUENAME and LATEST_LINK.

UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now,
we won't have conflicts there.

Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer
is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel
has the correct PKGNAME anyway.

Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called
OPTIONS_FILE now.)

Reviewed by:	antoine, bapt
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3336
21a283f3be
Baptiste Daroussin (bapt) · 1.5.99.7
Update to 1.5.99.7 Changes: - Use mmap with sqlite during pkg update - Fix pkg query humanized output - Improvement in pkg check manpage - Lots of improvements in the solver - Improve Linux support - Fix CVE-2015-1283 in bundle expat

Note that this release does not pass 100% of the regression tests due to a known
cosmetic issue.
5e1ae330d2
Baptiste Daroussin (bapt) · 1.5.99.6
Update to 1.5.99.6 Changes: - Manpages updates - Add a random delay to pkg-audit when invoked without a TTY - Update zsh completion - Add a new AUTOCLEAN option to automatically clean the cache directory - Don't attempt to set file ownership when INSTALL_AS_USER is set - Add a new configuration item to define custom HTTP User-Agent - Fix an integer overflow when displaying package size for package
7f8f30a522
Baptiste Daroussin (bapt) · 1.5.99.5
Update to 1.5.99.5 Changes: - Progress is not printing dots on the fly when stdout is not a tty - Fix partial upgrades - Fix url in pkg.conf.sample about vuxml - Improve zsh completion
67a86ac3ee
Baptiste Daroussin (bapt) · 1.5.99.4
Update to 1.5.99.4 Changes: - fix signature checking
f2a5a9e656
Baptiste Daroussin (bapt) · 1.5.99.3
Remove outdated mirrors
694e3c87ea
Baptiste Daroussin (bapt) · 1.5.99.3
Update to 1.5.99.3 Changes: - Updates in manpages - Improved support for --quiet everywhere - Keep 7 (by default) days (rotation) of backups of the database - Prune old style backups entirely - Code cleanup - Deduplication of the checksum related part of the code - New checksum serialization format for files allowing to change the checksum   algorihtm (fully backward compatible) for now sha256 and
78bb648706
Baptiste Daroussin (bapt) · 1.5.99.2
Update to 1.5.99.2 Changes: - Documentation updates - Make pkg alias -l respect quiet - Reinstall packages if shlib provided has changed - Do not expose shlibs without SONAME as provided libs - Update sqlite to 3.8.9 - Add linenoise to have editing capabilities with pkg shell - Fix pkg audit -r formatting - Stop elf analysis sooner if not operating on an elf file - Fix checking signatures on arm
cc8d23daab
John Marino (marino) · 1.5.99.1
ports-mgmt/pkg-devel: Regenerate EXTRA_PATCHES (unbreaks DragonFly)

The patch target will fail if EXTRA_PATCHES is defined, but it is
only defined on DragonFly (change is no-op for FreeBSD)

Approved by:	Just fix it
330ab91772
Baptiste Daroussin (bapt) · 1.5.99.1
Update to 1.5.99.1 Changes: - Fix pkg ssh:// - Fix a missing '\n' in pkg audit - Fix compat at functions to not mess up with cwd
36a72bc24f
Bryan Drewery (bdrewery) · 1.5.99.0
Let WITH_CCACHE_BUILD work on the pkg port that is not PKG_ORIGIN.

For example, if ports-mgmt/pkg is PKG_ORIGIN then it is safe to use
ccache for ports-mgmt/pkg-devel.
ea5adfb8f1
Baptiste Daroussin (bapt) · 1.5.99.0
Update to 1.5.99.0 aka (1.5.0 but from master branch) Changes: - Fix pkg query -e "%#0" - Add some test for pkg query - Add some tests for pkg repo - pkg repo now follows symlinks and skip Latest - Bunch of documentation updates
0bfa28f3ea
Baptiste Daroussin (bapt) · 1.4.99.20
Update to 1.4.99.20 aka pkg 1.5.0 rc2 Changes: - Print notice to stdout - Prevent pkg-static from trying to load plugins - Bring back displaying of download size - pkg shlib now support -q (quiet) - Accept symlinks in pkg repo and ignore directories named (Latest or hidden: starting with a .)
2aacf18235
Baptiste Daroussin (bapt) · 1.4.99.19
Install a default pkg.conf is not already existing

Requested by:	amdmi3
b9f89802dc
Baptiste Daroussin (bapt) · 1.4.99.19
Update to 1.4.99.19 aka 1.5.0-rc1 Changes: - Activate CONSERVATIVE_UPGRADE by default (by popular demand) - Add -l to pkg alias - Small improvements on zsh completion - Add some new popular aliases to the sample pkg.conf
f4e0af4cde
Baptiste Daroussin (bapt) · 1.4.99.18
Update to 1.44.99.18 Changes: - Add the user_version in the sql dump - Fix pkg version when checking the ports tree without INDEX - Make pkg lock -l respect -q - Fix ipv6 - Add noauto alias - Make lead alias more accurate - New pkg lock --has-locked-packages (return 0 if it has locked packages 1 otherwise) - Resume fetch support for http/ftp
b82954d753
Baptiste Daroussin (bapt) · 1.4.99.17
Update to pkg 1.4.99.17 (pkg 1.5.0 beta2) Changes: - Allow processing of Transfer-Encoding: chunked responses. when fetch a package - Only consider compatible ABI when processing shlibs provides/requires - Ensure to first satisfy requires on packages already in universe before trying   add new ones into the universe
cc047292ea
Baptiste Daroussin (bapt) · 1.4.99.16
Update to 1.4.99.16 aka pkg 1.5.0 beta1 Changes: - Important fixes on provides/requires (now we can solve situation like php upgrades with modification in the ports tree to set the provides/requires)
e8d245bd51
Baptiste Daroussin (bapt) · 1.4.99.15
Update to 1.4.99.15 aka pkg 1.5.0 alpha2 Changes: - stop spamming users about false libraries not found when creating a package - do not consider local files when evaluation the pkg delete arguments - be more precise about the reasons of a dependency change - give informations about abi changes - give informations about options changes - fix conflicts handling in multi repository mode
ff04e756a2
Baptiste Daroussin (bapt) · 1.4.99.14
Update to 1.4.99.14 aka 1.5.0 alpha1 Changes: - More fixes on pkg lock/unlock on 32bits - Initial support for provides/requires - Print which package is the reason for direct depend change - Cleanup regression tests - Allow pkg create -M ./plop.ucl -p ./plop.plist - Deprecate --relocate - add pkg -r <rootdir> option to allow easy cross installation - export PKG_ROOTDIR in script to ease cross inst
6890e87f20
Baptiste Daroussin (bapt) · 1.4.99.13
Release 1.4.99.13 Changes: - Add examples about annotations - Make the public API c++ friendly - Fix bug in solver found by the ruby 2.1 upgrade: puppet getting removed when   it should not
3b13fab0f3
Baptiste Daroussin (bapt) · 1.4.99.12
Release 1.4.99.12 Changes: - New option DEFAULT_ALWAYS_YES to have pkg defaulting on Yes for all questions - Cleanup some internal APIs - 37 more regression tests - Improved support for NetBSD - Fix return code of pkg lock -l - Fix documentation about the default location for keywords - Mark @ignore as deprecated - Add more flexibility to keyword credentials:   * Now accept mini version of argumen
470fcdb1bc
Baptiste Daroussin (bapt) · 1.4.99.11
Release 1.4.99.11 Changes: - connect pkg alias to the build - add pkg create -v and PKG_CREATE_VERBOSE in pkg.conf to get verbose package   creation - show repository priority in pkg -vv - document pkg_repo_priority() in pkg_repos(3) - fix a bug handling chflags on systems without chflagsat reported on dfly but   might also affect FreeBSD 8 and 9 even if no bugs were reported yet [1]

[1] Special thanks goes to Dillon for removing the dirt our of my eyes and
  spotting the bug, Antonio Huete Jimenez (tuxillo) for testing and tracking the
  bug since it has been spotted on dragonfly
4e22fc3280
Baptiste Daroussin (bapt) · 1.4.99.10
Update to 1.4.10 and 1.4.99.10 - Fix a regression causing bus error

Reported by:	marino
e6d0c7f821
Baptiste Daroussin (bapt) · 1.4.99.9
Update pkg to 1.4.9 Update pkg-devel to 1.4.99.9 Changes: - Fix regression introduced in 1.4.8 [1] - Document pkg set -n - add pkg alias

Reported by:	mandree [1]
4617df4fba
Baptiste Daroussin (bapt) · 1.4.99.8
Update to 1.4.99.8 Changes: - Tons of resources leak plugged (thanks coverity) - Fix size calculation output - Fix 'pkg add -M -' - Update libucl to latest version - Improve documentation - Make pkg create more verbose - Add -q|--quiet option to pkg create - Add a new pkg alias subcommand - Update sqlite to 3.8.8.2 - Update libucl to 0.7.2
fc8ee30c40
Baptiste Daroussin (bapt) · 1.4.99.7
Update to 1.4.99.7 Changes: - pkg updating now support case insensitive matching - pkg_printf(3) support %x (so print the size of the package tarball) - Use SI symbols (MiB instead of MB) - When using procctl on an older kernel that does not implement the reaper functionnality, be explicit about the failing syscall. - Lots of fixes on the chflags handling - Emit names in cudf instead of origins
88dcdf979d
Baptiste Daroussin (bapt) · 1.4.99.6
Update to 1.4.99.6 Fix last minute regression
ff4b9929e3
Baptiste Daroussin (bapt) · 1.4.99.5
Update to 1.4.99.5 Changes: - Enforce a bit more pkgname a unicity identifier - Fix regression on pkg query with multiline - Fix sql error on some pkg query - Stop again caching files for file:/// repos - Do not trust libarchive to apply modes - Accept tar files in repositories - Handle chflags - Some updates in documentation - update sqlite to 3.8.8 (small performances improvements and bug memory
44f69f3ec9
Baptiste Daroussin (bapt) · 1.4.99.4
Update to 1.4.99.4 Changes:   - Remove lots of dead code   - Fix pkg stat reporting the size of remote repositories   - Remove execinfo dependency   - Fix pkg check with no active remote db   - Remove outdated example from manpages   - More accurate error messages in pkg check   - Use the new procctl(2) features when possible to prevent script from spawning daemons   - More fixes in integrity chec
32b11fba60
Baptiste Daroussin (bapt) · 1.4.99.3
Update to 1.4.3 and 1.4.99.3 Changes: - Fix integrity check in multi repository - Document CONSERVATIVE_UPGRADE - Document repository priority - Do not duplicate replacement request
dcce7a470c
Baptiste Daroussin (bapt) · 1.4.99.2
Update pkg to 1.4.2 and pkg-devel to 1.4.99.2: Changes: - Fix applying proper modes on directories on some corner cases (fixes pkg install mailman) - Do not display pkg-message is pkg register fails - During removal, if a directory was already removed by a bogus script, continue removing parents.

Changes specific to -devel:
- pkg -d now set DEBUG_LEVEL -d == DEBUG_LEVEL=1 -dd == 2 etc
58c057d2bc
Baptiste Daroussin (bapt) · 1.4.99.1
Release pkg 1.4.1 and 1.4.99.1 Changes: - Manpages updates - Fix directory removal guard - Fix loading of files from packages - Add new CONSERVATIVE_UPGRADE option to enforce keeping package from the   repository they were installed from - Add priority support for multi repository

While this version improves a lot multi repo support please note that there is a
known bug resulting in failures during integrity checking, resulting in some
operations may have to be run twice we are investigating a fix
903e334d32