CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

ports-mgmt/portupgrade 2.4.16_4,2

FreeBSD ports/packages administration and management tool suite

Port info

Maintainer
bdrewery@FreeBSD.org
Packages
latest: 2.4.16_4,2
Upstream
up to date
Last update
to 2.4.16_4,2 · b9ccc3cf4a
Quarterly
2026Q4: 2.4.16_4,2
Formerly
sysutils/portupgrade until 2007-02-05
WWW
https://wiki.freebsd.org/portupgrade
Links
cgit · VuXML

Install

Package
# pkg install portupgrade
installs 2.4.16_4,2 from latest; from quarterly (2026Q4) 2.4.16_4,2
Port
# cd /usr/ports/ports-mgmt/portupgrade && make install clean
# make -C /usr/ports/ports-mgmt/portupgrade config  # change options first
Size
95 KiB download · 341 KiB installed
Depends on
databases/ruby-bdb 0.6.6_9, lang/ruby34 3.4.9_2,1
License
BSD3CLAUSE
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.4.16_4,22.4.16_4,2–
FreeBSD 152.4.16_4,22.4.16_4,2–
FreeBSD 142.4.16_4,22.4.16_4,22.4.16_4,2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.4.16_4,22.4.16_4,2–
FreeBSD 142.4.16_4,22.4.16_4,22.4.16_4,2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.4.16_4,2.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (6) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
284053maintainer-feedback? ports-mgmt/portupgrade: Installs insecure databases/db5 as a dependencyNew2025-01-14
227747ports-mgmt/portupgrade: quick&dirty FLAVOR supportIn Progress2024-11-21
280104maintainer-feedback? ports-mgmt/portupgrade: http://pkgtools.github.com/ 404 not foundNew2024-10-04
257406maintainer-feedback? ports-mgmt/portupgrade: no support for .pkgNew2023-04-21
248019maintainer-feedback? ports-mgmt/portupgrade: Fails to upgrade ports: Copy failed!New2022-10-03
Show all 6
PRSummaryStatusChanged
223943maintainer-feedback? ports-mgmt/portupgrade and the ICU-librariesIn Progress2021-10-30

Commits (350)

Po-Chuan Hsieh (sunpoet) · 2.4.16_4,2
ports-mgmt/portupgrade: Remove outdate RUBY_VERSION check

- While I'm here, convert to options helper

lang/ruby31 has been removed on 2025-03-31.

Approved by:	portmgr (blanket)
With hat:	ruby
b9ccc3cf4a
Baptiste Daroussin (bapt) · 2.4.16_4,2
ports-mgmt/portupgrade: stop warning about wrong package format

pkg expect the compression format to be set via -f option, portupgrade
passes this information extracting the PKG_SUFX variable which is now
invariable since pkg 1.17. the .pkg suffix is always used, but the -f
option still expect the compression format to be defined in same form as
before: .tar, .tbz, .tgz etc.

Remove the call to the -f format to remove a useless warning.

PR:		284054
Submitted by:	Terry Kennedy <terry-freebsd@glaver.org>
22f6c41496
Eugene Grosbein (eugen) · 2.4.16_3,2
ports-mgmt/portupgrade: unbreak for Ruby 3.2+

portupgrade fails with an error "undefined method `exists?' for File:Class"
if used with Ruby 3.2+ (seems it removed alias "exists?" for method "exist?").

Fix it. Bump PORTREVISION.
32a6b38c23
Yasuhiro Kimura (yasu) · 2.4.16_2,2
ports-mgmt/portupgrade*: Move manpages to share/man

PR:		277400
Approved by:	portmgr (blanket)
39a440a1ae
Yasuhiro Kimura (yasu) · 2.4.16_1,2
ports-mgmt/portupgrade*: Revert "Use databases/rubygem-dbm with Ruby 3.2"

This reverts commit 2a325f4cc52c8565348304a9a24a2975ecaaeedd.

With commit 5ebb18384791 database/ruby-bdb works fine with all
supported ruby versions. So always use it as RUN_DEPENDS again.

PR:		272491
Approved by:	maintainer timeout
bd3870067d
Muhammad Moinur Rahman (bofh) · 2.4.16,2
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby

Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk

Notable changes are.

- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
  USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.

This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863

I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.

Approved by:	portmgr
Differential Revision:	https://reviews.freebsd.org/D37925
18c6e18276
Yasuhiro Kimura (yasu) · 2.4.16,2
ports-mgmt/portupgrade*: Use databases/rubygem-dbm with Ruby 3.2

databases/ruby-bdb is BROKEN with Ruby 3.2.

PR:		268207
Approved by:	maintainer timeout
MFH:		2023Q1
2a325f4cc5
Stefan Eßer (se) · 2.4.16,2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.4.16,2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 2.4.16,2
ports-mgmt: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  "Waitman Gobble" <uzimac@da3m0n8t3r.com>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Stangl <alex@stangl.us>
  *  Anders F Bjorklund <afb@users.sourceforge.net>
  *  Benjamin Lutz
  *  Brendan Molloy <brendan+freebsd@bbqsrc.net>
  *  Conrad J. Sabatier <conrads@cox.net>
  *  Edwin Groothuis (edwin@mavetju.org)
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Gabriel Linder <linder.gabriel@gmail.com>
  *  Heiner <h.eichmann@gmx.de>
  *  Ilya A. Arkhipov <rum1cro@yandex.ru>
  *  John Marino <marino@FreeBSD.org>
  *  Jun-ichiro itojun Hagino <itojun@itojun.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Mamoru Sakaue / MwGhennndo
  *  Martin Kammerhofer
  *  Matthew Seaman
  *  Matthew Seaman <m.seaman@infracaninophile.co.uk>
  *  Matthias Andree <mandree@FreeBSD.org>
  *  Matthias Schmidt
  *  Pawel Pekala <pawel@FreeBSD.org>
  *  Philip M. Gollucci <pgollucci@p6m7g8.com>
  *  Philipp Wuensche <cryx-ports@h3q.com>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Romain Tartiere <romain@FreeBSD.org>
  *  Romain Tartiere <romain@blogreen.org>
  *  Securedog <securedog@users.sourceforge.jp>
  *  Sergei Kolobov <sergei@kolobov.com>
  *  Shaun Amott <shaun@inerd.com>
  *  Stefan Walter <sw@gegenunendlich.de>
  *  Stephen Hurd <shurd@FreeBSD.org>
  *  Timothy Redaelli <drizzt@gufi.org>
  *  Tom Hukins <tom@FreeBSD.org>
  *  Vasil Dimov <vd@datamax.bg>
  *  Vladimir Chukharev
  *  Yanhui Shen <shen.elf@gmail.com>
  *  Zane C, Bowers <vvelox@vvelox.net>
  *  kmoore@FreeBSD.org

With hat:	portmgr
9c165b9835
Stefan Eßer (se) · 2.4.16,2
*/*: Remove redundant '-*' from CONFLICTS definitions

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
04b9da4140
Mathieu Arnold (mat) · 2.4.16,2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Bryan Drewery (bdrewery) · 2.4.16,2
Update to 2.4.16.

- Preserve shlib symlink [1]

PR:		223943 [1]
198c17eafa
Bryan Drewery (bdrewery) · 2.4.15,2
Update to 2.4.15.

- pkgdu: Fix syntax error with Ruby 2.3 (invalid next)

PR:		218139
dd12f59107
Mathieu Arnold (mat) · 2.4.14,2
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Mathieu Arnold (mat) · 2.4.14,2
Always set the DEFAULT github DISTFILE with .tar.gz for EXTRACT_SUFX.

Fix distinfo for the offending ports.

lang/yorick's tag was moved, and the added patch was no longer needed.

PR:			207644
Submitted by:		mat
Exp-run by by:		antoine
Sponsored by:		Absolight
Differential Revision:	https://reviews.freebsd.org/D4268
018eeadae5
Bryan Drewery (bdrewery) · 2.4.14,2
Update to 2.4.14

Changes:
  * Fix ordering of build based on FETCH/PATCH/EXTRACT dependencies. [1]
  * Support security vulnerabilities as a build failure reason. [2]
  * portupgrde -p: Fix new dependencies not getting installed. (#58) [3]
  * Don't install missing dependencies which are already satisfied (#62).
    Note that this purposely causes these missing dependencies to not show
    in the job (-n) and final results output which is a compromise to at least
    avoid the wrong packages being installed. The logging issue is in #30.

PR:		177365 [1]
Submitted by:	truckman@ [1]
PR:		192232 [2]
Submitted by:	Yuri <yuri@rawbw.com> [2]
PR:		184672 [3]
dd6fe564c3
Bryan Drewery (bdrewery) · 2.4.13_1,2
- Add dependency back for ruby-bdb for Ruby 2.0.

PR:		188084
PR:		185523
b47e3677c2
Bryan Drewery (bdrewery) · 2.4.13,2
- Update to 2.4.13 - Update plist for pkg-1.3 - Remove pkg-message as ALT_PKGDEP has not worked properly since 2008.   See https://github.com/freebsd/portupgrade/issues/61

Changes:
  * portinstall/upgrade -P[P] now supported with pkgng
  * pkg_fetch now supports pkgng
  * Fixed pkg-1.3 delete support to not recurse
  * Fixed portupgrade -b support with pkgng
  * Improved portsclean performance with pkgng (#59)
  * Use service(8) for rc script restarting
  * Show command executions with PORTUPGRADE_DEBUG in environment
  * Deprecate rc script handling in lieu of pkg's HANDLE_RC_SCRIPTS in pkg.conf
f9a6f5b59b
Bryan Drewery (bdrewery) · 2.4.12_2,2
Quick fix for pkg-1.3 delete handling. It now requires -f to not automatically recurse.
06d9bebb77
Bryan Drewery (bdrewery) · 2.4.12_1,2
- Fix building as user
689709f06d
Bryan Drewery (bdrewery) · 2.4.12_1,2
- Blacklist ruby-bdb with Ruby 2.1 [1] - Stop installing script(1) wrapper [2] - Fix ZSH dir leftover (somewhat a false-positive) [3]

PR:		ports/188084 [1]
Submitted by:	Christoph Moench-Tegeder <cmt@burggraben.net> [1]
Submitted by:	sunpoet [2]
Reported by:	swills [3]
d66d215cad
Bryan Drewery (bdrewery) · 2.4.12,2
- Don't remove ruby dirs - Don't bump PORTREVISION as this isn't a big deal, just a nit.
443dd97079
Bryan Drewery (bdrewery) · 2.4.12,2
- Update LICENSE to BSD3CLAUSE - Convert to USES=tar - Convert to @sample   Don't bump PORTREVISION as this is a nop.
cc685d84fc
Bryan Drewery (bdrewery) · 2.4.12,2
- Update to 2.4.12

Changes:

 * Fix namespace clash with TSort when using bundler
e186ff58cf
Bryan Drewery (bdrewery) · 2.4.11.3,2
- Update to 2.4.11.3

Changes:

 * Fix date parsing with pkg_install
 * Show proper origin in 'portupgrade' when duplicates detected
 * Fix crash when attempting to upgrade bsdpan packages

PR:		ports/184428
PR:		ports/184426
Submitted by:	Yoshiaki Kasahara <kasahara@nc.kyushu-u.ac.jp>
aa420ba38f
Bryan Drewery (bdrewery) · 2.4.11.2_1,2
Force rebuild which may address some recent reports of issues backing up packages
53b2ffb236
Bryan Drewery (bdrewery) · 2.4.11.2,2
- Support STAGEDIR
87d3f71d6d
Bryan Drewery (bdrewery) · 2.4.11.2,2
- Update to 2.4.11.2

Changes:
  Rework date parsing for Ruby 1.9 to not depend on devel/ruby-date2 [1]

PR:		ports/182239 [1]
5616147454
Bryan Drewery (bdrewery) · 2.4.11.1,2
- Add NO_STAGE until validated to be safe for upcoming staging support
2324655f20
Bryan Drewery (bdrewery) · 2.4.11.1,2
- Update to 2.4.11.1

Changes:
  - Fix pkgng detection when using pkg-devel [1]
  - Try to fix stack overflow issue with Ruby 1.9 and large installs [2]

PR:		ports/181813 [1]
Reported by:	Takanori Saneto <sanewo@ba2.so-net.ne.jp> [1]
Reported by:	many [2]
Tested by:	Robert Burmeister [2]
761f867613
Bryan Drewery (bdrewery) · 2.4.11,2
- Update to 2.4.11

Changes:
  * Speedup and simplify pkgng usage by not populating pkgdb.db
19c11e107b
Bryan Drewery (bdrewery) · 2.4.10.7,2
- Update to 2.4.10.7 - Add LOCAL mirror

Changes:
  * Fix FTP PACKAGESITE encoding / as %2F in Ruby1.9

Reported by:	Jigal Weinberg
aa95b5108e
Bryan Drewery (bdrewery) · 2.4.10.6,2
- Update to 2.4.10.6

Changes:

  * Fix how pkgng support is detected for completions
  * Fix portcvsweb so it uses svnweb.FreeBSD.ORG [1]
  * Symlink portcvsweb as portsvnweb
  * Fix portcvsweb FreshPorts and datespec support [2]
  * Add support for WITH_PKGNG=devel

Submitted by:	Matthew Luckie <mjl@luckie.org.nz> [1] (based on)
Submitted by:	paranormal <paranormal@isgroup.com.ua> [2]
8dcd25c189
Bryan Drewery (bdrewery) · 2.4.10.5_1,2
- Don't use ruby-bdb with ruby 2.0 as it is currently   broken. Fallback on dbm_hash for now.

Reported by:	Jeroen Ruigrok van der Werven
40dd6cf483
Bryan Drewery (bdrewery) · 2.4.10.5,2
- Update to 2.4.10.5

Changes:
 * Fix -O flag not always being respected
 * Disable dependency sanity checking with PKGNG as it has its own mechcanism
   pkg-check(8) for that.
 * Fix date parsing support with PKGNG [1]

PR:		ports/175926 [1]
Reported by:	deeptech71 <deeptech71@gmail.com> [1]
026483c726
Bryan Drewery (bdrewery) · 2.4.10.4_1,2
- Remove optional dependency on databases/ruby-bdb1 as there   is really no compelling reason to keep it. It just adds   confusion. Portupgrade should gracefully handle rebuilding   the pkgdb now if the bdb backend changes because of this.   If not just force rebuild: pkgdb -uf - Make databases/ruby-bdb the unconditional db backend
b8ef3deb2d
Bryan Drewery (bdrewery) · 2.4.10.4,2
- Update to 2.4.10.4

Changes:
 - Fixes crash when HOME is not set in the environment,
   which fixes some cases of puppet usage [1]

PR:		ports/175281 [1]
Reported by:	Vladimir <v.chernyadev@tradesoft.ru> [1]
c18631ee21
Bryan Drewery (bdrewery) · 2.4.10.3,2
- Convert SINGLE OPTION DB_OVERRIDE to RADIO
643f761fc4
Bryan Drewery (bdrewery) · 2.4.10.3,2
- Update to 2.4.10.3

Changes:
    * Fix ZSH completions with PKGNG
    * Fix BASH completions with PKGNG
    * Fix upgrading ports-mgmt/pkg causing hangs on 9.1,STABLE,CURRENT

Feature safe:	yes
6121ca946e
Bryan Drewery (bdrewery) · 2.4.10.2,2
- Update to 2.4.10.2

Changes:
 - Fix error when running `pkgdb -L`

PR:		ports/172855
Feature safe:	yes
5be4eaf291
Bryan Drewery (bdrewery) · 2.4.10.1,2
- Update to 2.4.10.1

Changes:
 * Fixes pkgdb stale lock when cleaning shared libraries
 * Fixes pkgng code causing 'pkg set -o' to be called when
   not needed.

Feature safe:	yes
261f79ac46
Bryan Drewery (bdrewery) · 2.4.10,2
- 2.4.10 release - Trim header

Changes:
  * Pkgng support when WITH_PKGNG=yes is defined in /etc/make.conf
    Portupgrade does not yet support pkgng packages or `pkgdb -F`,
    just building/upgrading ports using pkgng.
    Be sure to run `pkgdb -fu` to convert any existing pkgdb.
  * Move all files out of global ruby namespace
  * manpage cleanups

Feature safe:	yes
514d6150d5
Bryan Drewery (bdrewery) · 2.4.9.9,2
- Update to 2.4.9.9

Changelog:
 * Fix running portupgrade from a portdir picking that port up as
   the origin to upgrade/install. Regression from 2.4.9.8 [1]
 * Don't run 'make config' when only using packages with -PP
 * Fix portinstall -n not listing depends or a summary (#29)
 * manpage cleanups
 * port{install,upgrade} -n will no longer fetch packages when using
   -P or -PP. Use -F to fetch packages instead. -n implies dry run,
   so it should not be making any modifications to the system.

Reported by:	ache@ [1]
Approved by:	bapt (mentor)
103b49c10b
Bryan Drewery (bdrewery) · 2.4.9.8,2
- Update to 2.4.9.8

Changelog:

  * Fix MOVED tracking when upgrading ports [1]
  * Track and display deleted ports when upgrading
  * Automatically set DISABLE_CONFLICTS when moving origins
  * Fix crash when running portupgrade inside of a WRKDIR
  * Fix "Frozen string" error with ruby 1.9 when using the
    {BEFORE,AFTER}{INSTALL,DEINSTALL} hooks in pkgtools.conf
  * Fix failure being seen as success due to broken script(1) on
    older systems [2][3]. This is done by installing a more recent
    script(1) into PREFIX/libexec/pkgtools and using it instead.
    Only installed/used on FreeBSD 8.0 and earlier.

PR:		ports/151662 [1], ports/147242 [2],
		ports/131111 [3]
Approved by:	eadler (mentor)
a13e482eac
Bryan Drewery (bdrewery) · 2.4.9.7,2
- Update to my new maintainer address

Approved by:	eadler (mentor)
b70d151d98
Jason Helfman (jgh) · 2.4.9.7,2
- Update to 2.4.9.7 - Fixes crash when checking for duplicated origins

PR:	ports/170292
Reported by: Hans
Submitted by:	maintainer, bryan@shatow.net
2e9568750d
Jason Helfman (jgh) · 2.4.9.6,2
- Update to 2.4.9.6, and add DOCS option to port -- Fix `portsdb -U` crash -- Show new version when upgrading ports -- Show recursive depends when upgrading -- Respect LOCALBASE [ports/146858] -- Fix crash on duplicated origins

PR:	ports/170266
Submitted by:	maintainer, bryan@shatow.net
b81b99c657
Baptiste Daroussin (bapt) · 2.4.9.5,2
Convert to new options framework

PR=		ports/168534
Submitted by:	Bryan Drewery <bryan@shatow.net> (maintainer)
b4f91f677e
Eitan Adler (eadler) · 2.4.9.5,2
Upgrade to 2.4.9.5

Changes:

Fixes regression introduced 2.4.9.4 release, causing failed upgrades to
be seen as successes. Reported by: Matthew D. Fuller

PR:		ports/167512
Submitted by:	Bryan Drewery <bryan@shatow.net> (maintainer)
00e0cf9296