installs 2.8.4 from latest; from quarterly (2026Q4) 2.8.4
Port
# cd /usr/ports/ports-mgmt/pkg && make install clean
# make -C /usr/ports/ports-mgmt/pkg config # change options first
Size
13 MiB download · 52 MiB installed
Depends on
nothing
License
BSD2CLAUSE
Options
1 of 1 on in the package: DOCS
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
2.8.4
2.8.4
–
FreeBSD 15
2.8.4
2.8.4
–
FreeBSD 14
2.8.4
2.8.4
2.8.4
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
2.8.4
2.8.4
–
FreeBSD 14
2.8.4
2.8.4
2.8.4
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.8.4.
Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
maintainer-feedback? ports-mgmt/pkg: does not show a dependency for a package, but removing it wants to remove many others; autoremove trying to remove a manually installed package
Update to 1.9.4 - Stop dropping privileges for fetching, it causes more issues than it solves - Fix segfault when ABI is defined by empty - Fix reporting of deprecated packages - Provide instructions on how to unset vital flages - Fix libfetch for NetBSD - Fix @config potential double free - Always warn about the deprecated @dirrm/@dirrmtry - Always warn about the deprecated @exec - Rework pkg reg
PR: 214381 [1], 215029 [2]
Reported by: lampa@fit.vutbr.cz [1]
Exp-run: antoine [2]
Update to 1.9.3 - Fix file descriptor leak during rc script execution - Fix setting attributes on directories - Fix locking on NFS - Allow pkg annodate -S to run as a non priviledge user - Extend the audit periodic script to report about expiration/deprecation
Update to 1.9.0
- Drop privileges in many commands
- Drop privileges when fetching a file
- Add resource limitation in sandboxes
- Add support for METALOG
- pkg delete new prints a warning for pattens that matches nothing?
Add a hack in pkg to skip running predeinstall for javavmwrapper-2.5
During upgrades/reinstall javavmwrapper 2.5 pre deinstall script deletes the pkg
temporary files preventing to finish the upgrade.
A fixed version of javavmwrapper will be made soon, this hack will remain in the
ports tree and not in pkg(8) itself. This hack is made to not bother users is
only affecting upgrade/reinstall phase not proper deinstall
PR: 210313
Update to 1.8.7 - update internal expat to 2.2.0 - fix external solver - fix build on freebsd pre 9.2 - fix warnings on armv6 - fix solver issue resulting in missing conflicts or reinstalling unneeded packages - add a mini summary at the end of the output
Release 1.8.6 - Important fixes in the solver - When conflicts are found, they are explicitly printed - Reduce namecache contention a bit - Temporary files created during extraction are now hidden - Accept symlinks to directories when pkg is expecting a directory
Add a patch to fix grabbing mirror lists over https
Note that people are using mirror_type: http when they should not
most probably due to bad documentation on our side so we will improve that later
mirror_type: http is only useful if you actually host multiple mirror of your
repos see pkg-repository(5).
Update to 1.8.4 Changes: - Fix: setting date on system not POSIX 2008 compliant (like FreeBSD 8) - Fix: running pkg in env where the 0 file descriptor is closd - Fix: make http mirror type respect the specified port - Fix: chown/chmod on linux - Fix: pkg ssh - Improved upgrade chain in multi repo environment - Update libucl to latest version
Do not check deinstall script results at all except if DEVELOPER_MODE is set
Due to too many bad quality ports, for now we are back in not checking pre/post
deinstall scripts at all except if DEVELOPER_MODE=yes is set, we hope to readd
those checks once the ports have been fixed
Release pkg 1.8.0
New features:
- new vital flag that prevent from removing a package with pkg delete when not specifying -f
- upgrade process now has atomicity per packages meaning now we can safely check the return of the pre* scripts
- handle ctrl-c during upgrade/install/update
- solver improvements
- pkg clean now runs in a capsicum sandbox on supported plateforms
Changes:
- pkg delete now fails if one tries to delete it (the pkg package) without -f. Before it was just warning and skipping it
- pkg install --from-root has been renamed pkg install --recursive to avoir confusion
Fixes:
- correctly handle hardlinked setuid files
- better handling of setuid
- fix elf analysis when some bad libraries have SONAME specified by empty
- fix elf analysis when a binary provides elf_notes but not the expected ones and are still valid freebsd binaries
(this fixes the case when libgdk_pixbuf was not found as a provided lib on i386)
- NAMESERVER option is now working again and inputs are better checked
- lots of bug fixes: potential leaks mostly
Update to 1.7.2
Changes:
- Update libucl to latest version which fixes an issue with empty pkg.conf (regression test added)
- pkg install on an already installed package returns 0 again this regression was introduced when fixing pkg lock (regression test added)
Update to 1.7.1
This release fixes regressions:
- detection of new version of pkg could fail
- if the all process operation would have an inpact of less than 1MB on the FS
then the action is proceed with out asking the user to acknowledge it
Update to pkg 1.7.0 Changes: - Support new "vital" notion: prevent from implicit deletion - Improved support for OpenBSD/bitrig (still lacks some functions in libc) - Improved ZSH completion - Updated libucl - Lots of fixes in error messages - Fixed "pkg lock" handling - Allow to specify "inline" respositories in pkg.conf - ipv6 fixes - Allow to restrict the accepted url schemes - More commands su
Update to 1.6.4 Changes: - Fix hardlinks extraction with --rootdir - Relax url scheme acceptance to allow file:/ and file:// - Accept pkg+ for url scheme where it was never intended to be used, because users used it anyway - Remove pkg-message
Update to 1.6.3 Changes: - Allow to limit the valid url scheme in pkg.conf - Add support for SOURCE_DATE_EPOCH: https://reproducible-builds.org/specs/source-date-epoch/ - Fix pkg check -d - Fix testsuite with kyua 0.12 - Fix completion on pkg info -l - Reduce te probability to get an infinite loop on pkg version check - Fix pkg version -q - Update libfetch to the latest version from head - Debug m
Note that this release will be merged to quarterly branch in 10 days
Update to 1.6.2 Changes: - Fix cross building - Improved zsh completion - Improved error messages - Improved documentation - Bug fixes in the solver - Allow to specify repositories directly via pkg.conf - Allow multiple version of the same package in a repository - Fix ipv6 testing in configuration
Release pkg-1.6.0 Changes since pkg-1.5 series - Lots of improvements in the solver (in particular fixes the case like the recent jpeg upgrade) - Lots of fixes in the 3 way merge code - pkg add can now work without a version specified in the dependency line - pkg check -d now also check the required libraries - Improved support for partial upgrades - Improved zsh completion support - Improved li
Remove UNIQUENAME and LATEST_LINK.
UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now,
we won't have conflicts there.
Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer
is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel
has the correct PKGNAME anyway.
Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called
OPTIONS_FILE now.)
Reviewed by: antoine, bapt
Exp-run by: antoine
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D3336
Update to pkg 1.5.6 Changes: - Incorporate in sources the patch for expat CVE-2015-1283 Note that pkg is not vulnerable because it does not use the patched function - improvements in pkg check manpage - fix format specifier in libpkg's pkg_vets
Release pkg 1.5.5 Changes: - Manpages updates - Add a random delay to pkg-audit when invoked without a TTY - Update zsh completion - Add a new AUTOCLEAN option to automatically clean the cache directory - Don't attempt to set file ownership when INSTALL_AS_USER is set - Add a new configuration item to define custom HTTP User-Agent - Fix an integer overflow when displaying package size for packages
Update to 1.5.4
Changes:
- Fix partial upgrades
- pkg create -v now ticks (print does on a regular basis) if not on a tty
- Fix vuxml url in sample configuration
- zsh completion improvements
Update to 1.5.3 Changes: - Updates in manpages - Improved support for --quiet everywhere - Keep 7 (by default) days (rotation) of backups of the database - Prune old style backups entirely - Do not pushed in shlibs required any library we can find in the list of files owned by the package
Update to 1.5.2 Changes: - Documentation updates - Make pkg alias -l respect quiet - Reinstall packages if shlib provided has changed - Do not expose shlibs without SONAME as provided libs - Fix pkg audit -r formatting - Stop elf analysis sooner if not operating on an elf file - Fix checking signatures on arm
ports-mgmt/pkg: Regenerate EXTRA_PATCHES (unbreaks DragonFly)
The patch target will fail if EXTRA_PATCHES is defined, but it is
only defined on DragonFly (change is no-op for FreeBSD)
Approved by: Just fix it
Let WITH_CCACHE_BUILD work on the pkg port that is not PKG_ORIGIN.
For example, if ports-mgmt/pkg is PKG_ORIGIN then it is safe to use
ccache for ports-mgmt/pkg-devel.
Update to 1.5.0 Changes since pkg 1.4.0: - Initial provides/requires support - Lots of new regression tests have been added - Initial support for OS X - Initial support for NetBSD/EdgeBSD - Update most of the bundled third party software has been updated to their latest version - Improve the messages reported by pkg - Properly support file flags - Implement argument support for custom keywords -
Thanks to all testers and contributors,
Release 1.4.11 Changes: - show repository priority in pkg -vv - document pkg_repo_priority() in pkg_repos(3) - fix a bug handling chflags on systems without chflagsat reported on dfly but might also affect FreeBSD 8 and 9 even if no bugs were reported yet [1]
[1] Special thanks goes to Dillon for removing the dirt our of my eyes and
spotting the bug, Antonio Huete Jimenez (tuxillo) for testing and tracking the
bug since it has been spotted on dragonfly
Release 1.4.7: Changes: - pkg updating now support case insensitive matching - pkg_printf(3) support %x (so print the size of the package tarball) - Use SI symbols (MiB instead of MB) - When using procctl on an older kernel that does not implement the reaper functionnality, be explicit about the failing syscall. - Lofs of fixes on the chflags handling