CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

ports-mgmt/portupgrade 2.4.16_4,2

FreeBSD ports/packages administration and management tool suite

Port info

Maintainer
bdrewery@FreeBSD.org
Packages
latest: 2.4.16_4,2
Upstream
up to date
Last update
to 2.4.16_4,2 · b9ccc3cf4a
Quarterly
2026Q4: 2.4.16_4,2
Formerly
sysutils/portupgrade until 2007-02-05
WWW
https://wiki.freebsd.org/portupgrade
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install portupgrade
installs 2.4.16_4,2 from latest; from quarterly (2026Q4) 2.4.16_4,2
Port
# cd /usr/ports/ports-mgmt/portupgrade && make install clean
# make -C /usr/ports/ports-mgmt/portupgrade config  # change options first
Size
95 KiB download · 341 KiB installed
Depends on
databases/ruby-bdb 0.6.6_9, lang/ruby34 3.4.9_2,1
License
BSD3CLAUSE
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.4.16_4,22.4.16_4,2–
FreeBSD 152.4.16_4,22.4.16_4,2–
FreeBSD 142.4.16_4,22.4.16_4,22.4.16_4,2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.4.16_4,22.4.16_4,2–
FreeBSD 142.4.16_4,22.4.16_4,22.4.16_4,2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.4.16_4,2.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (6) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
284053maintainer-feedback? ports-mgmt/portupgrade: Installs insecure databases/db5 as a dependencyNew2025-01-14
227747ports-mgmt/portupgrade: quick&dirty FLAVOR supportIn Progress2024-11-21
280104maintainer-feedback? ports-mgmt/portupgrade: http://pkgtools.github.com/ 404 not foundNew2024-10-04
257406maintainer-feedback? ports-mgmt/portupgrade: no support for .pkgNew2023-04-21
248019maintainer-feedback? ports-mgmt/portupgrade: Fails to upgrade ports: Copy failed!New2022-10-03
Show all 6
PRSummaryStatusChanged
223943maintainer-feedback? ports-mgmt/portupgrade and the ICU-librariesIn Progress2021-10-30

Commits (350)

Jason Helfman (jgh) · 2.4.9.4,2
- Update to 2.4.9.4

PR:	ports/167338
Submitted by:	maintainer, bryan@shatow.net
0af6ed5ab0
Jason Helfman (jgh) · 2.4.9.3_1,2
- use Sourceforge - avoids issue with not having SSL support - Adds LICENSE - Uses proper RUBY_VER - on request from myself, pkg-message was generalized by maintainer

PR:	ports/167096
Submitted by:	maintainer, bryan@shatow.net
88d8712308
Baptiste Daroussin (bapt) · 2.4.9.3_1,2
- new upstream for portupgrade - update WWW, MASTER_SITE and distfile to reflect this - fix usage with ruby 1.9[1]

PR:		ports/165353 [1], ports/166992 [2]
Submitted by:	"Dr. Andreas Haakh" <bugReporter@ib-haakh.de> [1], Bryan Drewery <bryan@shatow.net> [2] (new maintainer)
d6d1fbb4b3
Philip M. Gollucci (pgollucci) · 2.4.9.3,2
-  Reassign to ports@    please consider using ports-mgmt/portmaster

Discussed with: bugmeister(eadler, linimon), ruby(swills, pgollucci) via #bsdports
77911aa577
Mark Linimon (linimon) · 2.4.9.3,2
dd note about default PR assignment.

Spurred by:	pgollucci
e2a153e4d9
Stanislav Sedov (stas) · 2.4.9.3,2
- Update to 2.4.9.3 (a bugfix release).
c27d64543e
Stanislav Sedov (stas) · 2.4.9.2_2,2
- We don't install README anymore. - Fix a bug when :map was used on a string.
788e0ebba7
Stanislav Sedov (stas) · 2.4.9.2_1,2
- Don't use ruby 1.9 File.realpath(), use File.expand_path() instead.   The former generates exceptions when the path doesn't exist, which   is not what we want.
f686e750b5
Stanislav Sedov (stas) · 2.4.9.2,2
- Fix plist.
26c09b8b11
Stanislav Sedov (stas) · 2.4.9.2,2
- Update to 2.4.9.2.   This version is a bugfix release.
6ce623bba5
Stanislav Sedov (stas) · 2.4.9,2
- Provide the new URL.
5e764ca46e
Stanislav Sedov (stas) · 2.4.9,2
- Update portupgrade to 2.4.9.   This version brings ruby 1.9 support contributed by Steve Wills.
c23e369a3f
Stanislav Sedov (stas) · 2.4.8_1,2
- Mark the conflict with portupgrade-devel as an install only conflict.
07add2d7d8
Stanislav Sedov (stas) · 2.4.8_1,2
- Fix portupgrade's shebang patcher.

Reported by:	many
Submitted by:	knu
6fc7fb578a
Stanislav Sedov (stas) · 2.4.8,2
- Update to 2.4.8:   - Fix the bug in BEFOREDEINSTALL processing.   - Add .txz packages support.
940cd51898
Stanislav Sedov (stas) · 2.4.7,2
- Update to 2.4.7.
73eef9dd78
Norikatsu Shigemura (nork) · 2.4.6_4,2
Don't install and/or build dependencies when only using packages.

PR:		ports/143979
Submitted by:	Bryan Drewery  bryan at shatow net
Reviewed by:	Yusuke Hoshizuki  hoshizuki at chaos cs tsukuba ac jp
be4219845f
Akinori MUSHA (knu) · 2.4.6_3,2
Stop users from sending general questions, suggestions and patches directly to me.
12317977e4
Dmitry Marakasov (amdmi3) · 2.4.6_3,2
- Switch SourceForge ports to the new File Release System: categories starting with P,R,S
3eb168f46b
Sergey Matveychuk (sem) · 2.4.6_3,2
- Drop maintainership to ruby@
afe43d1958
Sergey Matveychuk (sem) · 2.4.6_3,2
- A workaround for a null string problem with -R option

Submitted by:	John Rumsey <rumseyj at rumsey.co.nz>
58fd1ed486
Sergey Matveychuk (sem) · 2.4.6_2,2
- After portversion get -F option, -v stops showing full packages names.   Fix it.
375ea73578
Sergey Matveychuk (sem) · 2.4.6_1,2
- A patch to fix fetching of packages problem.
6446ec02df
Pav Lucistnik (pav) · 2.4.6,2
- Simplify ldconfig handling
af13aa1d5a
Sergey Matveychuk (sem) · 2.4.6,2
- Remove perl dependency. perl is not used for some time as it was before.
9060e4a61f
Sergey Matveychuk (sem) · 2.4.6,2
- Update to 2.4.6   * Many bugs was fixed   * a new pkgdu utility shows installed packages disk usage

PR:		many
e78b871ce1
Sergey Matveychuk (sem) · 2.4.3_2,2
Fix pkg-plist with NOPORTDOCS=yes
ac88ed65ea
Sergey Matveychuk (sem) · 2.4.3_2,2
- Remove code that gather not installed depends. It makes more problems   than solves.

Discussed with:	pav
770dfbe40d
Sergey Matveychuk (sem) · 2.4.3_1,2
- Fix a crash that caused sometimes when -R option specified.

Reported by:	pav
bb9070e754
Sergey Matveychuk (sem) · 2.4.3,2
- Upgrade both ports to 2.4.3   * Change a legacy part of code for gathering dependecies. It fixes     situation when some depends ports could be updated even when it     was up-to-date. As a result I added another check for -R option.   * Fix a wrong condition in portsclean. Now -L option works again.   * Change a semantic for -q option. Now it means 'quiet'. Don't     show a message when -N spec

Reported by:	pav, Peter Hofer (DesktopBSD)
2870cafb79
Sergey Matveychuk (sem) · 2.4.2_1,2
- When -o specifised, gather depends for specified origin. - Just ignore a package if there is no port directory exists. A correct way   for users is to place the ports in HOLD_PKGS in pkgtools,conf, but   they did not. So it makes my life a little easy.
1e49370b9c
Sergey Matveychuk (sem) · 2.4.2,2
- Update to 2.4.2.   * Many bugs fixed (thanks to all reporters).   * Semantic for -c and -C has changed. -c runs 'make config-conditional'     and -C 'make config' (forced config).   * All ports now runs under portupgrade/portinstall control.
07fb60054d
Sergey Matveychuk (sem) · 2.3.1_1,2
- A patch from HEAD: when gcc installed, some libraries may be conflicted   with system ones. portsclean -Li ask to remove them. No removes by   default, but we don't want an user remove system libraries just press 'y'   in portscleanup -Li.

PR:		ports/116830
Reported by:	clemens fischer <ino-news at spotteswoode.dnsalias.org>
f7f6bf4ae2
Rong-En Fan (rafan) · 2.3.1,2
Remove print/ghostscript-afpl as it has been replaced by print/ghostscript-gpl since version 8.57. The leading ghostscript is the -gpl one.

Approved by:	portmgr (pav)
9716a77fea
Sergey Matveychuk (sem) · 2.3.1,2
- Remove scared sentence from pkg-message

Asked by:	krion
9e6c9f408e
Sergey Matveychuk (sem) · 2.3.1,2
- Update to 2.3.1. Many people test it and it looks good.   To upgrade back from portupgrade-devel use the command:   portupgrade -o ports-mgmt/portupgrade portupgrade-devel
65b5209a90
Sergey Matveychuk (sem) · 2.2.6_3,2
- Remove the last patch. This fix makes other troubles.

Reported on:	ports@
c6bebc4f5e
Sergey Matveychuk (sem) · 2.2.6_2,2
- Fix a long standing bug when shelljoin() function wrong placed ""   when more than one variables (WITH_*, WITHOUT_*) passed.
e5266e2a29
Sergey Matveychuk (sem) · 2.2.6_1,2
- Ignore bsdpan- pseudo ports. - Add a note about ports with suffixes (e.g. -nox11)

Reported by:	David Morgan <morgad_AT_eclipse.co.uk>,
		Philip Kizer <pckizer_AT_nostrum.com>
72e611304a
Sergey Matveychuk (sem) · 2.2.6,2
- Update to 2.2.6 version.   An unpleasant bug was fixed when pkgdb could accidently remove some   dependencies in +CONTENTS files. It's recomented to run pkgdb -L once   after upgrade to fix dependencies list. See UPDATING file.

Reported and tested by:	Randy Pratt <bsd-unix_AT_earthlink.net>
a48c576322
Sergey Matveychuk (sem) · 2.2.2_4,2
- Fix after moving to a new category.
803001884f
Pav Lucistnik (pav) · 2.2.2_3,2
Populate a new ports-mgmt category. List of moved ports:

devel/portcheckout -> ports-mgmt/portcheckout
  devel/portlint -> ports-mgmt/portlint
  devel/portmk -> ports-mgmt/portmk
  devel/porttools -> ports-mgmt/porttools
  misc/instant-tinderbox -> ports-mgmt/instant-tinderbox
  misc/porteasy -> ports-mgmt/porteasy
  misc/portell -> ports-mgmt/portell
  misc/portless -> ports-mgmt/portless
  misc/tinderbox -> ports-mgmt/tinderbox
  security/jailaudit -> ports-mgmt/jailaudit
  security/portaudit -> ports-mgmt/portaudit
  security/portaudit-db -> ports-mgmt/portaudit-db
  security/vulnerability-test-port -> ports-mgmt/vulnerability-test-port
  sysutils/barry -> ports-mgmt/barry
  sysutils/bpm -> ports-mgmt/bpm
  sysutils/kports -> ports-mgmt/kports
  sysutils/managepkg -> ports-mgmt/managepkg
  sysutils/newportsversioncheck -> ports-mgmt/newportsversioncheck
  sysutils/pib -> ports-mgmt/pib
  sysutils/pkgfe -> ports-mgmt/pkgfe
  sysutils/pkg-orphan -> ports-mgmt/pkg-orphan
  sysutils/pkg_cutleaves -> ports-mgmt/pkg_cutleaves
  sysutils/pkg_install -> ports-mgmt/pkg_install
  sysutils/pkg_install-devel -> ports-mgmt/pkg_install-devel
  sysutils/pkg_remove -> ports-mgmt/pkg_remove
  sysutils/pkg_rmleaves -> ports-mgmt/pkg_rmleaves
  sysutils/pkg_trackinst -> ports-mgmt/pkg_trackinst
  sysutils/pkg_tree -> ports-mgmt/pkg_tree
  sysutils/portbrowser -> ports-mgmt/portbrowser
  sysutils/portconf -> ports-mgmt/portconf
  sysutils/portdowngrade -> ports-mgmt/portdowngrade
  sysutils/portcheck -> ports-mgmt/portcheck
  sysutils/portmanager -> ports-mgmt/portmanager
  sysutils/portmaster -> ports-mgmt/portmaster
  sysutils/portscout -> ports-mgmt/portscout
  sysutils/portsearch -> ports-mgmt/portsearch
  sysutils/portsman -> ports-mgmt/portsman
  sysutils/portsnap -> ports-mgmt/portsnap
  sysutils/portsopt -> ports-mgmt/portsopt
  sysutils/portupgrade -> ports-mgmt/portupgrade
  sysutils/portupgrade-devel -> ports-mgmt/portupgrade-devel
  sysutils/port-authoring-tools -> ports-mgmt/port-authoring-tools
  sysutils/port-maintenance-tools -> ports-mgmt/port-maintenance-tools
  sysutils/psearch -> ports-mgmt/psearch
  sysutils/p5-FreeBSD-Portindex -> ports-mgmt/p5-FreeBSD-Portindex
  sysutils/qtpkg -> ports-mgmt/qtpkg
  textproc/p5-FreeBSD-Ports -> ports-mgmt/p5-FreeBSD-Ports

Repocopies by:	marcus
0d0d56457b
Sergey Matveychuk (sem) · 2.2.2_3,2
- misc-depends targed was removed from bsd.ports.mk. Don't use it anymore.

PR:		ports/108662
Submitted by:	Mark Evenson<mark.evenson AT gmx.at>
d9b5e55088
Sergey Matveychuk (sem) · 2.2.2_2,2
- Fix brackage after ports/Makefile 1.97 was committed
55034d0a60
Pav Lucistnik (pav) · 2.2.2_1,2
- Fix handling of lib/compat/pkg directory

Approved by:	sem (maintainer)
f59f83b016
Sergey Matveychuk (sem) · 2.2.2,2
- Update to 2.2.2. New stable version.   Most visible changes are:   * Database files locking. Only one process can write to them     in the same time.   * pkgdb -F is more smart now and takes OPTIONS, make.conf and     pkgtools.conf settings into account.

Moreover:
  * Many bugs fixed.
  * Many code refactored.
379dd8e3bb
Sergey Matveychuk (sem) · 2.1.3.3_1,2
* Change WWW line.   wiki is the same as wikitest but looks better.

Inspired by:	developers@
510f6f635b
Sergey Matveychuk (sem) · 2.1.3.3_1,2
Add a FreeBSD wiki page as a home page.
c69658ad1b
Sergey Matveychuk (sem) · 2.1.3.3_1,2
- Fix descriptions in pkgtools.conf to be obviouslier. [1] - Fix s pointyhat URL for package direcories.

PR:		ports/102417 [1]
Reported by:	Ryan Wehler <mindflux98@gmail.com>
2ace452a38
Sergey Matveychuk (sem) · 2.1.3.3,2
- Update to 2.1.3.3.   A few fixes merged from developing version, patches integrated.
9a6aae0de8