installs 2.8.4 from latest; from quarterly (2026Q4) 2.8.4
Port
# cd /usr/ports/ports-mgmt/pkg && make install clean
# make -C /usr/ports/ports-mgmt/pkg config # change options first
Size
13 MiB download · 52 MiB installed
Depends on
nothing
License
BSD2CLAUSE
Options
1 of 1 on in the package: DOCS
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
2.8.4
2.8.4
–
FreeBSD 15
2.8.4
2.8.4
–
FreeBSD 14
2.8.4
2.8.4
2.8.4
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
2.8.4
2.8.4
–
FreeBSD 14
2.8.4
2.8.4
2.8.4
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.8.4.
Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
maintainer-feedback? ports-mgmt/pkg: does not show a dependency for a package, but removing it wants to remove many others; autoremove trying to remove a manually installed package
ports-mgmt/pkg: Update to 1.15
Changes from 1.14.99.6 to 1.14.99.7
- Default the OSVERSION check to false
- Fix some errors related to getpwname_r/getgrnam_r
- Add RISC-V ABI aliases
- Add '%X' to pkg-query, this print the internal package checksum
Changes from 1.14.99.5 to 1.14.99.6
- Run lua scripts before shell scripts
- unbreak build with -fno-common
Changes from 1.14.99.4 to 1.14.99.5
- Fix lua script during pkg_delete
- Return file type for lua_stat
Changes from 1.14.99.3 to 1.14.99.4
- Add function to lua scripts:
* Simple stat()
* filecopy to copy a file preserving its attributes
* filecmp to compare files
* update sqlite to latest version
* Add a new 'hash' mode to pkg repo to make repositories CDN friendly
* Isolate transport protocol to be able to easily change implementations
in the futur
* Fix invalid json in even_pipe
* lots of portability fixes
Changes from 1.14.99.2 to 1.14.99.3
- Fix linking on FreeBSD
Changes from 1.14.99.1 to 1.14.99.2
- Fix hanging if a script spawn a process and
it still run after the scripts finish
- Prevent potential hang with lua scripts
- For http mirror first try to get the list from the
full path and then fallback on the root one if we
didn't find anything.
- Add a debug message if obtaining the lock fails
hanges from 1.13.99.7 to 1.14.99.1
- parallelize the run of the tests
- Fix VERSION_MINOR expansion
- Fix chflags tests
- Bring back pkg create -n but in a consistent way
- Improve build of sqlite
- Use mmap in sqlite
- Update sqlite to latest version
- Document pkg_create(3)
- Prepare the land for futur proof remote dependency handling
- Update usage of pkg set -A and pkg set -v
- Add pkg create -l (compression level)
PR: 249035 (exp-run)
Approved by: bapt
Update to 1.14.5
Changes from 1.14.4 to 1.14.5:
- Prevent potential hang with lua scripts
- Add a debug message if obtaining the lock fails
Approved by: bapt
ports-mgmt/pkg: Respect liblzma.pc if available.
Note that this is meant to be a temporary hack and will be reverted once the
freebsd/pkg have solved this in the build infrastructure.
PR: 200142
MFH: 2020Q2
Approved by: portmgr (bapt over IRC)
Differential Revision: https://reviews.freebsd.org/D24972
Update to 1.14.3:
- Add pkg create -l to set compression level
- Parallelize the run of kyua
- Fix VERSION_MINOR UCL expansion
- Bring back pkg create -n
- Document pkg_create(3)
- Improve documentations in pkg-set(8)
Update to 1.14
Major changes since 1.13:
- HTTP keep-alive in libfetch (imported from xbps)
- allow to backup shared libraries during upgrades
(a compat-libraries packages is created to keep track of it)
- better reproducible build support
- More variable exposed to configuration
exp-run by: antoine
Release pkg 1.13 - when installing over a non tracked file (not owned by any package) pkg now saves a copy of that file as .pkgsave - Fix a chicken/egg problem with the meta being compressed and defining the compression format. Now pkg repo will create a meta.conf file uncompressed (it is small enough) and fallback on the old meta.txz. Note that meta.txz is still created for backward
PR: 243564
exp-run by: antoine
Attempt to fix pkg on mips.
Since recently, libarchive is linked to libzstd, which itself uses threads
somehow, this make the build of pkg in mips unhappy.
Given libpkg is not threadsafe anyway just drop the __thread
PR: 240822
Reported by: tech-lists@zyxst.net and mandree
Discussed with: jhb
Release pkg 1.12.0
- updating: allow to use regular expession in AFFECTS: value
- updating: improve the exact matching for AFFECTS: values
- recommand using pkg bootstrap -f instead of pkg-static install -f to reinstall
pkg itself
- Add support for lua in package scripts (not documented yet)
- Add support for lua in keywords definition (not documented yet)
- Properly detect when base libarchive is linked to zstd and handle it. (needed
an upcoming change in base)
- Add a function tu lua script to append message at the run of the pkg process
along with other messages
- Add the missing warning about @unexec being deprecated for a while now in
pkg-plist
- Fix build with gmake
- Ensure pkg_shutdown properly reinitialize all the closed fd to -1.
- Do not crash when being passed an unsupported ABI
security/base-audit: upgrade 0.3 -> 0.4
- Since all supported FreeBSD versions have anticongestion function
in /etc/default/periodic.conf, always use it to insert random sleep
with non-interactive mode.
- pet portlint
PR: 236751
Submitted by: Yasuhiro KIMURA <yasu@utahime.org>
Approved by: Miroslav Lachman <000.fbsd@quip.cz> (maintainer)
Update to 1.11
Improvements:
* better ABI name on linux
* lots of changes in internal API to use fd when possible
* 410.pkg-audit now uses anticongestion on freebsd 12+
* completion improvements
* add an extra line when printing pkg-messages to improve readability
* add %q to pkg_printf(3) and pkg-query(8) to print altabi
* make pkg version -r imply -R
* New build system based on autosetup
* pkg is now a semi static binary
* Add 3 new aliases:
- rall-depends: showing depenencies of a non installed package
- rcomment: showing only the comment of a non installed package
- rdesc: showing only the description of a non installed package
* close stdin when running scripts
* Tons of bug fixes
Removal:
* removed option: pkg repo -L
* removed script: pkg2ng
Add a patch to fix pkg-static with linked against openssl 1.1.1
This is needed to be able to sign repository with pkg-static
Reported by: many (based on a patch by gjb)
MFH: 2018Q4
security/base-audit: update 0.2 -> 0.3
- Use anticongestion function if available
PR: 230393
Submitted by: Yasuhiro KIMURA <yasu@utahime.org>
Approved by: Miroslav Lachman <000.fbsd@quip.cz> (maintainer)
security/base-audit: update 0.1 -> 0.2
- Introduce security_status_baseaudit_period variable to
files/405.pkg-base-audit.in in order to make it possible to specify
when this script is executed (i.e. daily, weekly or monthly).
PR: 224239
Submitted by: Yasuhiro KIMURA <yasu@utahime.org>, Miroslav Lachman <000.fbsd@quip.cz> (maintainer)
Audit base system against known vulnerabilities and generate reports including references to security advisories. It uses pkg audit and Vuxml database as is used for packages but this script checks base system.
Fix segfault in pkg version against the ports tree
PR: 224023
Reported by: jrm, kib, Trond.Endrestol@ximalas.info
Tested by: jrm (an early version of the patch)
Update to 1.10.3 - Accept DT_SONAME anywhere in .dynamic when parsing elf binaries - Fix pkg version when it deals with the ports tree and INDEX after flavors - Sort fts traversal in repo creation (for reproducible builds) - Documentation improvements - make pkg version -r imply -R
Update to 1.10.2 Changes from 1.10.1 to 1.10.2 - pkg clean is now happy if the cache dir non existing - 410.pkg-audit now uses anticongestion on freebsd 12 - fix pkg install -r foo if foo is a disabled repository - fix elf handling on non FreeBSD - fix support for platforms without AT_SYMLINK_NOFOLLOW - fix dropping privileges on Linux - fix build with recent libbsd - fix duplicate pkg registratio
PR: 221129
exp-run by: antoine
Retire WITHOUT_DEBUG flag.
The flag has partial support across the tree, and the same effect
can be obtained by using ".undef WITH_DEBUG".
Reviewed by: mat, rene
Approved by: portmgr (rene)
Differential Revision: https://reviews.freebsd.org/D12548
Update to 1.10.1 - Cache pw result to avoid over reloading nssswitch.conf - Fix allow to set env per repo for everykind of repo - Fix signing_command something saving a truncated signature in the file as a result pkg will reject any repository signed - Fix sqlite vfs overload with new sqlite - pkg which: add -m to show what files matched using globs - Revert the new UI which does not respect 80
Release pkg 1.10.0
* fix pkg which -g
* Do not use openssl for sha256
* Improve the default output when fetching data
* Update libfetch to the version of FreeBSD 11
* Fix NetBSD ABI
* Add a fallback for utimensat when reporting EOPNOTSUPP
* replace libsbuf with utstring for portability
* Overwrite some sqlite vfs functions to allow more capsicumisation of pkg
* move more pkg audit details into the library
* allow to run pkg query without any privileges
* extend the audit periodic script to report deprecated packages
* Fix fd leak to rcscripts
* stop dropping privieges during fetching it causes more issues than it solves
* speed walking though [reverse]dependencies
* Update blake2b to latest version
* Add blake2s to the list of supported checksums
* Internal digest now default on blake2b on 64 bits and blake2s on 32 bits.
* Fix segfault when ABI is defined but empty
* Do not use the shared library provides/requires on non FreeBSD/Linux
* Define _NETBSD_SOURCES on NetBSD to allow libfetch to use funopen
* Document vital flags
* Fix potential double free when dealing with @config keyword
* Add progress when fetching (number of files to fetch)
* Improved messages about locked packages
* Return 1 when a user rejects the proposed plan
* When dealing with configuration files '@config' never overwrites non tracked
files
* Warn everyone about deprecation of @dirrm and @exec
* Deduplicate metadata loading code
* pkg register now understands context aware messages
* Fix pkg register issues with some version of libarchive:
hardlinks not being made hardlinks sometime
issues when PREFIX is a symlink to another directory
* Use portable mechanism to find the number of CPUs which allows pkg repo to be
faster on linux
* New pkg upgrade --vulnerable