CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

ports-mgmt/portupgrade 2.4.16_4,2

FreeBSD ports/packages administration and management tool suite

Port info

Maintainer
bdrewery@FreeBSD.org
Packages
latest: 2.4.16_4,2
Upstream
up to date
Last update
to 2.4.16_4,2 · b9ccc3cf4a
Quarterly
2026Q4: 2.4.16_4,2
Formerly
sysutils/portupgrade until 2007-02-05
WWW
https://wiki.freebsd.org/portupgrade
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install portupgrade
installs 2.4.16_4,2 from latest; from quarterly (2026Q4) 2.4.16_4,2
Port
# cd /usr/ports/ports-mgmt/portupgrade && make install clean
# make -C /usr/ports/ports-mgmt/portupgrade config  # change options first
Size
95 KiB download · 341 KiB installed
Depends on
databases/ruby-bdb 0.6.6_9, lang/ruby34 3.4.9_2,1
License
BSD3CLAUSE
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.4.16_4,22.4.16_4,2–
FreeBSD 152.4.16_4,22.4.16_4,2–
FreeBSD 142.4.16_4,22.4.16_4,22.4.16_4,2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.4.16_4,22.4.16_4,2–
FreeBSD 142.4.16_4,22.4.16_4,22.4.16_4,2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.4.16_4,2.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (6) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
284053maintainer-feedback? ports-mgmt/portupgrade: Installs insecure databases/db5 as a dependencyNew2025-01-14
227747ports-mgmt/portupgrade: quick&dirty FLAVOR supportIn Progress2024-11-21
280104maintainer-feedback? ports-mgmt/portupgrade: http://pkgtools.github.com/ 404 not foundNew2024-10-04
257406maintainer-feedback? ports-mgmt/portupgrade: no support for .pkgNew2023-04-21
248019maintainer-feedback? ports-mgmt/portupgrade: Fails to upgrade ports: Copy failed!New2022-10-03
Show all 6
PRSummaryStatusChanged
223943maintainer-feedback? ports-mgmt/portupgrade and the ICU-librariesIn Progress2021-10-30

Commits (350)

Akinori MUSHA (knu) · 20040325_1
Fix a stupid bug introduced by the last update, which destroyed pkgnames and caused portupgrade to fail.

Reported by:	Palle Girgensohn <girgen@pingpong.net>
1b5b1d26d5
Akinori MUSHA (knu) · 20040325
Update to 20040325.

- Ignore padded 0's in version comparison.

  This fixes a bug 2.00 being wrongly regarded as equal to 2.0.2.

- Show a summary of how many packages were upgraded, ignored, skipped
  and failed after listing results.

  Requested by: netchild
3161161d7d
Akinori MUSHA (knu) · 20040208
Update to 20040208. (Just repacked to roll up recent patches)
523f98163a
Akinori MUSHA (knu) · 20040113_3
Fix a long-standing silly bug in uninstall_pkg().
ca2acc4c1c
Akinori MUSHA (knu) · 20040113_2
Make portsdb -U use the canonical way to make a ports index file now that make index has got fast enough.

Suggested by:	kris
4bb4e26f2b
Akinori MUSHA (knu) · 20040113_1
Add a patch to make portupgrade just use stdout/stderr redirection to keep build logs rather than calling script(1) when stdin is not a tty.

I wonder if this works against the portupgrade-from-cron problem...
2e991b1aa5
Akinori MUSHA (knu) · 20040113
Update to 20040113, a small maintenance release.

portsdb(1)
  - Follow ports intrastructure changes wrt build-time dependency --
    now portsdb -U properly picks EXTRACT_DEPENDS so they appear build-time
    dependency. (Thanks to schweikh)

misc.
  - Fix typos in documentation.  I seem to be unable to spell "pacakge"
    correctly, being a portmgr.  Or was it "pakcage" ?  Anyway, it was
    fortunate that I wasn't a packge manager.
38774b2ac7
Akinori MUSHA (knu) · 20030723
Update to 20030723.  Consider this as a minor update.

- If pkg_* is found in $PREFIX/sbin, use them instead of ones in
  /usr/sbin. (regardless of the value of PATH)

- pkg_fetch(1): Some servers like bento transfer packages files
  uncompressed, so add a workaround for this.  They are automatically
  recompressed.

- Get -q to work properly again.

- As the MOVED file is getting bigger and bigger, do not cache all the
  entries in memory but look it up every time needed.

- Show how to specify multiple arguments in one MAKE_ARG entry.

  FreeBSD PR:	ports/54631
  Submitted by:	Bruce M Simpson <bms@spc.org>
f2bf983754
Akinori MUSHA (knu) · 20030427
Update to 20030427.  New tarball.

portsdb(1):
- COMMENTFILE is deprecated.  Weird.  I thought I committed these
  changes long long ago.

  Submitted by:	Jean-Yves Lefort <jylefort@brutele.be>.
477059d80e
Akinori MUSHA (knu) · 20030422_1
Satisfy the latest ruby 1.8 more.

Submitted by:	Fritz Heinrichmeyer <Fritz.Heinrichmeyer@FernUni-Hagen.de>
2a999dfad0
Akinori MUSHA (knu) · 20030422_1
Add a patch to fix "undefined local variable" error.

Reported by:	many ;(
a211d19959
Akinori MUSHA (knu) · 20030422
Update to 20030422.  This is a maintenance release.

portsdb(1):
- Fix portsdb -U's COMMENT support.

  Submitted by:	Frerich Raabe <frerich.raabe@gmx.de>

portsclean(1):
- Fix a silly typo and unbreak portsclean -P.

  Submitted by:	Olivier Tharan <olive@oban.frmug.org>

pkgtools.conf(5):
- Set OS_PKGBRANCH to "<n>-stable" for PRERELEASE, RC, ALPHA, BETA,
  etc.

- Apply grammar fixes and rephrase a paragraph.

  PR:	ports/49042, ports/49041
  Submitted by:	Chris Pepper <pepper@rockefeller.edu>

overall:
- Appease ruby 1.8 which now complains about closed streams.
80db4951b8
Akinori MUSHA (knu) · 20030308_2
Fix an error handler typo so it fails gracefully.
d74c4dc3c0
Akinori MUSHA (knu) · 20030308_1
Bump PORTREVISION for a typo fix.
42ef59a923
Akinori MUSHA (knu) · 20030308
Fix a typo.  Sorry.
a343834f46
Akinori MUSHA (knu) · 20030308
Update to 20030308.

portupgrade(1):
  - -A/-B: Remove ;'s and spaces at the beginning of each command line
    to stop sh(1) from issuing a syntax error.

  - -A/-B: Omit running null commands.

  - Run AFTERINSTALL commands after restoring a failed upgrade also.

  - Fix a run time error caused by any?.

pkgtools.conf(5):
  - Introduce BEFOREDEINSTALL.

  - Deprecate rc_file() and rc_files(), and provide
    enabled_rc_scripts() and disabled_rc_scripts() instead.

  - Provide cmd_start_rc(), cmd_stop_rc(), and cmd_enable_rc() in
    addition to cmd_restart_rc() and cmd_disable_rc().

  - Update examples.

pkg_deinstall(1):
  - Run BEFOREDEINSTALL commands before deinstalling a package.
f666d5aaf5
Akinori MUSHA (knu) · 20030228
Update to 20030228.  Hot fixes integrated.

pkgdb(1):
- Add a missing comma and unbreak the cyclic dependency
  fixer.

  Submitted by:   ITO Tsuyoshi <tsuyoshi@is.s.u-tokyo.ac.jp>

portupgrade(1):
- Update man page.  Running pkgdb -F is no longer mandatory unless so
  directed by the pkgtools.
ba8034a787
Akinori MUSHA (knu) · 20030217_2
De-pkg-comment my non-ruby ports as well.
1f7c47a812
Akinori MUSHA (knu) · 20030217_2
Add a patch to suppress NameError during fixing a bsdpan-* origin.

Reported by:	"Daniel M. Zimmerman" <dmz@tffenterprises.com>
52e9260b59
Akinori MUSHA (knu) · 20030217_1
Add a patch to fix LocalJumpError.

Reported by:	Larry Rosenman <ler@lerctr.org>
de2b9b562c
Akinori MUSHA (knu) · 20030217
Update to 20030217.

portupgrade(1):
- Improve the packages support: When installing a binary package,
  automatically detect and install ports/packages it depends on.

portsdb(1):
- Replace COMMENT with COMMENTFILE.

  Submitted by:	Jean-Yves Lefort <jylefort@brutele.be>

pkgdb(1):
- Treat bsdpan-* packages specially; set their origins to those of
  p5-* where possible.

  Requested by:	nik

- Fix a minor problem with modifying the origin information of a
  package where it has no origin line.

pkgtools.conf(5):
- Make MAKE_ARGS more intelligent so installed pkgnames such as
  'ruby18-*' => 'RUBY_VER=1.8' is understood.

- Chase the bento site hierarchy change.

- Update some of the examples.
c8bbc410e3
Akinori MUSHA (knu) · 20030123
Update to 20030123.

portupgrade(1):
- Change the meaning of -D/--distclean.  When specified once, delete
  failed distfiles and retry when checksum fails.  When specified
  twice, do "make distclean" before each fetch or build (as -D meant
  before).

- Make -F/--fetch-only call make checksum/checksum-recursive instead
  of make fetch/fetch-recursive.

- Rename -l/--log-results to -l/--results-file.

- Rename -L/--log-prefix to -L/--log-file and make it accept a
  printf(3) style format.

pkg_which(1)/pkgdb(3):
- Store and look for file names after resolving symlinks using
  realpath(3).

miscellaneous:
- Fix some macro bugs in manpage.

- Fix a typo in the PORTUPGRADE example in pkgtools.conf.
ec31b3d9ce
Akinori MUSHA (knu) · 20021216
Update to 20021216.

pkgdb(1):
- Fix a problem in pkgdb's automatic dependency fixer that it only
  fixes the first found problem and leaves the rest.

portsclean(1):
- Fix a problem that portsclean(1) does wrong if a library search path
  has a trailing / or a double /.  This could confuse users.

  PR:		ports/46162
  Submitted by:	Lev A. Serebryakov <lev@serebryakov.spb.ru>

Approved by;	lioux (his first approval as a portmgr!) & knu ;)
8775785991
Akinori MUSHA (knu) · 20021209
Update to 20021209 and roll a new tarball for 5.0-RELEASE.

For the record, the previous tarball (pkgtools-20021101.tar.bz2) was
downloaded approximately 10,000 times in one month, 32% from the
United States, 17% from Japan, 6% from Germany, and 4% from
Canada. (followed by AU, NL, FR, GB, RU, SE, PL, ...)

pkgtools.conf(5):

- Add new variables: USE_PKGS and USE_PKGS_ONLY.

  Requested by:	Jeff Penn <jeff@jrpenn.demon.co.uk>

overall:

- Recognize INDEXFILE defaulting to 'INDEX'.

- Introduce a "fixme" cookie file not to invoke pkgdb -aF unnecessarily.

- Recognize the Hungarian and Portuguese language prefixes.

Approved by:	kris (implicitly)
3f8b472522
Akinori MUSHA (knu) · 20021119
Reword pkg-comment and pkg-descr.
822cf0471b
Akinori MUSHA (knu) · 20021119
Add a patch to make portupgrade(1) work on somewhat older systems which sed(1) does not have a -E option.

Pointed out by:	nork
5d7fea9006
Akinori MUSHA (knu) · 20021119
Update to 20021119.

overall:
- Use sudo in installing (copying) a file only if once it failed as
  the current user.

- Speed up string substitution.

portupgrade(1):
- Use sudo as necessary in saving log files also.

pkgdb(1):
- Look up ports/MOVED to fix stale origins (both ORIGIN and
  DEPORIGIN).

- Skip the check for origin duplicates when in automatic mode. (This
  speeds up autofix)

- When pointing out a missing origin, show the name of the package in
  question.

  Suggested by:	Genesys on EFnet
5154152750
Akinori MUSHA (knu) · 20021113
Update to 20021113, a maintenance release.

portupgrade(1):
- Check return status of hardly failing commands also.

pkgdb(1):
- Add -Q/--quiet and -QQ for internal use.

portsclean(1):
- Ditto.

overall:
- Reduce /bin/sh process calls by replacing shell redirection to
  /dev/null with pkgdb -Q/portsclean -Q/fetch -q. (I know I can do
  fork, dup and exec if necessary)

- Eliminate zombies during running.  Formerly waitpid's against
  terminated processes are delayed until Ruby gets short of resource
  and thus runs a GC, but now portupgrade(1), pkgdb(1) and
  portsclean(1) explicitly kick a waitpid immediately after each
  popen() is done.

  PR:		ports/38075
  Submitted by:	Chris J. Mutter <cjm@s2.enemy.org>
  Reported by:	several others
0c2b1eb0f6
Akinori MUSHA (knu) · 20021109
Update to 20021109.

overall:
- Allow a regular expression or glob pattern against origins as
  pkgname glob pattern.  For example, the following commands work as
  expected now:
	pkg_glob 'lang/*'
	portupgrade lang/ruby
	pkg_info ':(japanese|chinese|korean)/'

- Use install(1) instead of cp(1) and chmod(1) to install modified
  data files such as +CONTENTS.

pkgdb(1):
- Add a new option --autofix, which is a shorthand of --auto --fix
  (-aF).

portupgrade(1):
- Allow specifying a directory after -L.

- Auto-fix dependencies before creating a package.

  PR:		ports/41383
  Submitted by:	Vivek Khera <khera@kciLink.com>

pkgtools.conf(5):
- Add a new configuration variable ALT_PKGDEP, which defines
  alternative dependencies, used by pkgdb -F/-aF.  This makes yet
  another step forward to eliminate the need for manual pkgdb -F's.
96e3b242f0
Akinori MUSHA (knu) · 20021106_1
Apply a hot-fix against a bug where portupgrade(1)/pkgdb(1) leave temporary files ($TMPDIR/+CONTENTS*).  Bump PORTREVISION for that.

Modify the IGNORE message that is shown when pkg_create(1) is found to
be too old.
8bcd8f8426
Akinori MUSHA (knu) · 20021106
Update to 20021106.

overall:
- Make these work with ruby 1.7.

portupgrade(1):
- Get portupgrade -s to work again.

- Synchronize the failure reason guesser with the latest "processlogs"
  script.

- Rename -g/--go-on to -k/--keep-going, on the (vague) analogy of
  make(1).
c92490ee1b
Akinori MUSHA (knu) · 20021103
Issue a patch release 20021103, which fixes a bug where pkgdb -F failed to delete a stale @pkgdep. (harmless except it didn't work)
bfd5b9cdfb
Akinori MUSHA (knu) · 20021101
Update to 20021101.  Since there have been many changes, there could possibly be a couple of bugs.  Make sure to do your backups as always, and have fun. :)

overall, pkgdb(3):
- The DEPORIGIN information is fully supported.  Most stale
  dependencies are automatically fixed based on that.

  Hinted by:	sobomax

- Disregard a package if it has a file named "+IGNOREME" in the
  package directory.

  PR:		ports/41237
  Hinted by:	Jerry Murdock <j@jerrymurdock.com>, and some others

pkgdb(1):
- Add a new option -a/auto, used with -F/--fix, which turns on
  automatic mode, in which pkgdb(1) only fixes discrepancies that can
  be fixed 100% obviously and securely, and leaves the others.

- Make pkgdb(1) less verbose when -v is not specified.

portupgrade(1):
- Time the whole session also.

  Requested by:	nork

- Fix a bug in shellwords() where it wrongly interprets \ in '...' as
  meta-character.  This bug or maybe feature was inherited from Perl's
  shellwords.pl / Text::ParseWords.

  Reported by:	Gabriel Ambuehl <gabriel_ambuehl@buz.ch>

- The DEPORIGIN information is fully supported.  It fixes DEPORIGIN
  when a package is upgraded with a different port using -o/--origin,
  and "pkgdb -aF" is automatically called at closing.  This makes
  portupgrade a tad slower but greatly reduces the "pkgdb -F"
  annoyance.

- Fix a race where it rarely failed in updating the pkgdb after
  installation and the user had to run "pkgdb -fu".

- Do not redirect stderr to /dev/null when calling portsclean -L.  Now
  the pkgdb updater's indicator is displayed properly.

- Synchronize the build failure checker with the latest version of
  ports/Tools/portbuild/scripts/processlogs.

- Do not bother with +REQUIRED_BY files when they are mechanically
  generated from @pkgdep information by pkgdb(1).

pkg_fetch(1):
- Try .tgz first on FreeBSD 4.x and prior.  Although .tbz is smaller,
  there are few sites that prepare .tbz packages for FreeBSD 4.x.

pkgtools.conf(5)

- Prepare a new constant OS_PKGBRANCH, which is set to a
  release/branch name that is suitable for specifying a FTP packages
  directory, and make pkg_site_mirror() use it.

  PR:		ports/43265
  Submitted by:	Andriy Gapon <avg@icyb.net.ua>

portsclean(1):
- Suggest using libchk(1) to help manually clean out lib/compat/pkg.

- Improve messages.  Use the word "shadow" to say that a library hides
  another one with the same name.
4fde241afa
Akinori MUSHA (knu) · 20020921.1
http://www.iDaemons.org/distfiles/ -> ftp://ftp.iDaemons.org/pub/distfiles/
91f1565df9
Akinori MUSHA (knu) · 20020921.1
Update to 20020921.1.

- Fix a bug where portupgrade creates packages in a wrong directory.
  This was introduced in 20020921.

  Submitted by:	"Dmitry A. Panov" <redfox@Fluffy.Khv.RU>

- Make portcvsweb <pkgname> work when it is an obsoleted package.

- Update documents.
c789d8eda1
Akinori MUSHA (knu) · 20020921
Define USE_RUBY_FEATURES instead of hardcoding conditional *_DEPENDS.
e7adaf2a02
Akinori MUSHA (knu) · 20020921
Update to 20020921.

- Respect PKG_SUFX, which could be defined in /etc/make.conf or as an
  environment variable.

- Drop the pkg_tarup(1) dependency in favor of pkg_create(1) -b, and
  mark IGNORE for systems which pkg_create(1) does not support -b.
  On those systems such as 4.4-STABLE and prior, users can either
  a) update pkg_* tools or b) stick with portupgrade-20020920 +
  pkg_tarup-1.2_3.

- Remove the workaround against somewhat old 5-CURRENT's buggy
  bsd.*.mk.

- Improve zsh/bash/tcsh completion definitions. (not much for tcsh,
  though..)
d611ff979a
Akinori MUSHA (knu) · 20020920
Update to 20020920.

portupgrade(1):

- Time each build, install, upgrade, etc. and show times
  when -v/--verbose is specified.
  [Requested by: people on freenode:#freebsd]

pkgdb(1):

- Extend pkgdb(1)'s -o so it can also modify a port's origin.
  [Requested by: dcs]

- Raise an error when an empty pkgname is given with -s.

pkgtools.conf(5):

- Make MAKE_ARGS accept a proc.
  [Suggested by: alane]

miscellaneous:

- Now all the tools including portupgrade(1) should work on
  lang/ruby_static as well as lang/ruby_static-devel again.

- Completion definitions for zsh and bash are even slightly
  improved.
99a3260bb0
Akinori MUSHA (knu) · 20020902
Fix the ruby-shim dependency.

PR:		42722
Submitted by:	anane
247cf3ac24
Akinori MUSHA (knu) · 20020902
Update to 20020902.

- Fix the regexp for uname output so it can parse such as
  "5.0-CURRENT-YYYYMMDD-JPSNAP".

  Spotted by: will@FreeBSD.org

- portupgrade(1): Add more command failure checks in case sudo fails.

- portsclean(1): Add a cross reference to libchk(1) to the manpage.
f6c4aeccb3
Akinori MUSHA (knu) · 20020830
Put the real master site at the top of MASTER_SITES.  I seem to forget to transfer distfiles to ftp.freebsd.org too often...
6387efb6a9
Akinori MUSHA (knu) · 20020830
Update to 20020830.

portupgrade(1):
- Add more command failure checks in case sudo fails.

- Always build backup packages as root.

  Spotted by:	Stijn Hoop <stijn@win.tue.nl>

- Let NO_IGNORE negate IGNORE.

  FreeBSD PR:	ports/41467
  Suggested by:	Alan Eldridge <ports@geeksrus.net>

portsclean(1):
- Do not mix stderr output from make(1) with stdout.

  Submitted by:	Jos Backus <jos@catnook.com>
b673a63b51
Akinori MUSHA (knu) · 20020805
Update to 20020805.

pkgdb(1):
  - Do not fail in error when a non-installed package is specified
    with -o.

pkg_fetch(1):
  - Support bzip2'd packages (*.tbz).

  - Slightly fix messages.

  - Introduce OS_PATCHLEVEL and exclude `-p#' from OS_RELEASE.

    FreeBSD PR:		ports/40375
    Submitted by:	Andriy Gapon <agapon@excite.com> (partly)

portsclean(1):
  - -P/--pkgclean: Sweep away bzip2'd packages (*.tbz) too.

portupgrade(1):
  - Support bzip2'd packages (*.tbz).

pkgtools.conf(5):
  - Provide a couple of new utility functions, deorigin(origin) and
    rc_file(origin_or_pkgname).

  - Fix an example and provide some more examples.

  - Introduce OS_PATCHLEVEL and exclude `-p#' from OS_RELEASE.

misc.:
  - zsh compdefs: Look for *.tbz too.
71478ad458
Akinori MUSHA (knu) · 20020706
ruby-optparse is now part of ruby16-shim-ruby18.
fe8a515d58
Akinori MUSHA (knu) · 20020706
The optparse module is now part of Ruby 1.7.
b2f5cbf7f8
Akinori MUSHA (knu) · 20020706
Update to 20020706. (maintenance release)

- Avoid ruby 1.7 warnings.

- Show better error messages on command failure.

- pkg_deinstall(1): Unbreak -c by removing a leftover variable
  reference.

  Reported by:	Tod McQuillin <devin@spamcop.net>

- pkg_deinstall(1): (manpage): Clarify that -c/--collate is disabled
  by -f/--force.

  Prompted by:	parv <parv@pair.com>

- pkg_sort(1): Warn of each package entry that's not installed.

- pkg_sort(1): Do not print an empty line if no valid entry is given.

- pkgdb(1): (manpage) Fix typos, improve phrases and remove an
  incomplete paragraph.

  FreeBSD PR:	ports/39183
  Submitted by:	Chris Pepper <pepper@rockefeller.edu>

- portsclean(1): (manpage) Fix a typo.

  Submitted by:	Martijn Koster <mak@greenhills.co.uk>
6f6c874f2c
Akinori MUSHA (knu) · 20020429_1
Cope with a bug in CURRENT's bsd.*.mk infrastructure, that the beforeinstall target is somehow executed _after_ the realinstall target.
7cb16a9d07
Akinori MUSHA (knu) · 20020429_1
Now that introducing ruby-shim is done, bump PORTREVISION to let users proceed with the transition.
907d142973
Akinori MUSHA (knu) · 20020429
devel/ruby-fnmatch has been replaced with lang/ruby16-shim-ruby18.
187bcf33c1
Akinori MUSHA (knu) · 20020429
Update to 20020429, a stable release for 4.6-RELEASE.

- Make portsdb -U respect PORTS_DBDIR even when it is different than
  PORTS_DIR.

  Reported by:	Shigeto TAJIMA <tajima@ics.es.osaka-u.ac.jp>

- Do not override the user-defined value of PKG_PATH.

  Reported by:	The Anarcat <anarcat@anarcat.dyndns.org>
5366531501