CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

shells/zsh 5.9.2

The Z shell

Port info

Maintainer
bapt@FreeBSD.org
Packages
latest: 5.9.2
Upstream
up to date
Last update
to 5.9.2 · 587b444789
Quarterly
2026Q4: 5.9.2
Formerly
shells/zsh+euc_hack until 2006-09-01
WWW
https://www.zsh.org/
Links
cgit · VuXML

Install

Package
# pkg install zsh
installs 5.9.2 from latest; from quarterly (2026Q4) 5.9.2
Port
# cd /usr/ports/shells/zsh && make install clean
# make -C /usr/ports/shells/zsh config  # change options first
Size
5.0 MiB download · 20 MiB installed
Depends on
nothing
License
ZSH
Options
2 of 7 on in the package: DOCS EXAMPLES
Show the 5 options that are off
DEBUG ETCDIR GDBM PCRE STATIC
pkg-message
Shown after installing
==========================================================

By default, zsh looks for system-wide defaults in
/usr/local/etc.

If you previously set up /etc/zprofile, /etc/zshenv, etc.,
either move them to /usr/local/etc or rebuild zsh with the
ETCDIR option enabled.

==========================================================

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.9.25.9.2–
FreeBSD 155.9.25.9.2–
FreeBSD 145.9.25.9.25.9.2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.9.25.9.2–
FreeBSD 145.9.25.9.25.9.2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.9.2.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (4) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
287149maintainer-feedback? shells/zsh: does not clean temporary files anymoreNew2025-05-29
278380maintainer-feedback? shells/zsh: Consider making PCRE=on the defaultNew2024-10-10
278817maintainer-feedback? shells/zsh: HTML documentation is mostly missingNew2024-05-06
269292maintainer-feedback? shells/zsh fails to reset tty state on TMOUTNew2023-02-02

Commits (277)

Adam Weinberger (adamw) · 5.2_1
Clean up Makefile and regenerate patches.

Reorganize Makefile for clarity, and add a few comments.
While here, regenerate the patches with makepatch.

No functional changes.
26866f517f
Mathieu Arnold (mat) · 5.2_1
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Adam Weinberger (adamw) · 5.2_1
Fix ncurses detection properly. Now zsh builds and packages properly with base and ports ncurses, static or non-static.

Many thanks to bapt for showing me the magic trick here!
69d974e963
Adam Weinberger (adamw) · 5.2_1
Partially revert r403755. It can't build the curses module against ncurses from ports. It probably can, but configure is too smart to figure that out.

I have no confidence that linking against curses from ports results in a properly
working zshell. So, for now, back out the change. It will build a shared lib zsh
against ncurses from ports, but breaks statically-linked zsh's. Mark the port
as IGNORE if we're using ncurses from ports and building a static zsh.

Also, remove a regression-test target that isn't useful anymore (thanks to bapt
for the reminder about this).

I am not enthused about this change. It doesn't really "fix" the below PR, so
much as shoot ourselves in the other foot instead.

PR:	205500
625ae90c22
Adam Weinberger (adamw) · 5.2_1
Fix static build against devel/ncurses by correcting how zsh tries to link against the terminal libraries. No PORTREVISION bump as this shouldn't really change the generated packages.

PR:		181720
Submitted by:	wulf@mail.mipt.ru

While here, fix a spacing nit and wrap compound commands in parens.
ab9cfed5a5
Adam Weinberger (adamw) · 5.2_1
I'll take this port.
4e4acda59d
Baptiste Daroussin (bapt) · 5.2_1
Make zsh read again conf in /etc Drop maintainership
79c5812c13
Baptiste Daroussin (bapt) · 5.2
We do not have yet the need for that new timestamp :)
905a009ac4
Baptiste Daroussin (bapt) · 5.2
Update to zsh 5.2 While here: - ensure zsh looks ${PREFIX}/etc for zshrc [1] - hook the testsuite to our test framework

PR:		201866
Submitted by:	Georgy <delycid@gmail.com>
8642c28c93
Dmitry Marakasov (amdmi3) · 5.1.1
- Switch to options helpers

Approved by:	portmgr blanket
43eff73c3e
Baptiste Daroussin (bapt) · 5.1.1
Update to 5.1.1
a5cbb74d50
Baptiste Daroussin (bapt) · 5.1
Update to 5.1 Switch the default mirror to zsh.org until the distfiles appears on sourceforge
7c76f50b76
Dmitry Marakasov (amdmi3) · 5.0.8_3
- Fix shebangs

Approved by:	portmgr blanket
MFH:		2015Q3 (blanket)
cc1adc655e
Baptiste Daroussin (bapt) · 5.0.8_2
Move the SF mirrors first again
a90e315803
Baptiste Daroussin (bapt) · 5.0.8_2
Fix du(1) completion

PR:		200768
Obtained from:	ZSH upstream
641184f77f
Baptiste Daroussin (bapt) · 5.0.8_1
Really fix the plist

Pointyhat to:	bapt
Reported by:	many
784a48d73e
Baptiste Daroussin (bapt) · 5.0.8
Forgot about the plist
98daa443af
Baptiste Daroussin (bapt) · 5.0.8
Update to 5.0.8

Among the usual updates, users will be happy to discover plenty of new FreeBSD
related completion as well as zpty working out of box (which wasn't the case
anymore for a while)
648b6ac962
John Marino (marino) · 5.0.7_4
shells/zsh: Fix runtime error when built by gcc-5 with upstream patch

The previous approved fix for building with gcc5 still didn't work right.
Sure enough, upstream updated their patch.  When we take that update,
zshell finally behaves.  Piggybacking on previous approval.
2fe0013ab7
John Marino (marino) · 5.0.7_3
shells/zsh: Fix runtime error when built by gcc-5 with upstream patch

ZSH was misbuilt on gcc-5 due to an intentional change in behavior of
gcc5's cpp.  This patch to execute cpp with the -P switch comes from
upstream.  No revbump necessary as GCC5 isn't used by default on FreeBSD.

Reported by:	DragonFly ZSH users
Approved by:	maintainer (bapt, IRC)
714490a122
Baptiste Daroussin (bapt) · 5.0.7_3
Stop installing info files, the manpages already covers the full documentation Add --as-needed to LDFLAGS to avoid overlinking with some options
2241654c18
Baptiste Daroussin (bapt) · 5.0.7_2
Correct time report after r367805

PR:		367805
Submitted by:	peterj
1d15d261ee
Baptiste Daroussin (bapt) · 5.0.7_1
Add a patch the kld* completion to find modules in /boot/modules [1] While here, fix manpages so they render correctly with mandoc

PR:		194621 [1]
Submitted by:	clutton@zoho.com [1]
fc76172951
Baptiste Daroussin (bapt) · 5.0.7
Update to 5.0.7

Note from upstream release note:

Note in particular there is a security fix to disallow evaluation of the
initial values of integer variables imported from the environment (they
are instead treated as literal numbers).  That could allow local
privilege escalation, under some specific and atypical conditions where
zsh is being invoked in privilege elevation contexts when the
environment has not been properly sanitized, such as when zsh is invoked
by sudo on systems where "env_reset" has been disabled.
1a3853cac2
Baptiste Daroussin (bapt) · 5.0.6_2
Make zsh look at its config files in localbase in priority Cleanup a bit more the plist

Submitted by:	Rolf Nielsen <rmg1970swe@gmail.com>
3676fb9f80
Antoine Brodin (antoine) · 5.0.6_1
Fix stage violation/allow staging as a regular user
6b326fccf6
Baptiste Daroussin (bapt) · 5.0.6_1
Clean up directory handling
41ec698b06
Baptiste Daroussin (bapt) · 5.0.6_1
Regenerate the patch that corrects memory report for builtin time command
589f4f6557
Baptiste Daroussin (bapt) · 5.0.6
Update to 5.0.6 Only build with multibyte (disabling leads to weird bugs) [1]

Reported by:	adamw [1]
58d97dbf35
Baptiste Daroussin (bapt) · 5.0.5_1
Fix build with texinfo from ports
321251d1ce
Baptiste Daroussin (bapt) · 5.0.5_1
Fix building zsh on a FreeBSD which is a NIS client [1] Fix hangs upon '>(command)' redirections (enforce always using pipes) [2]

PR:		183253 [1], 180178 [2]
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org> [1], danielsh@apache.org [2]
With help of:	jilles [2]
67d99922a7
Baptiste Daroussin (bapt) · 5.0.5
Test ICONV_LIB instead of being dependant on an OSVERSION

Submitted by:	tijl
1e29832872
Baptiste Daroussin (bapt) · 5.0.5
Only pickup iconv from base even if libiconv is installed [1] While here do not leak stage path info zwc bytecode

Reported & tested by:	dim [1]
a4f5f55d83
Baptiste Daroussin (bapt) · 5.0.5
Add an @shell keyword to handle adding and remove a shell path in /etc/shell Bump port revision of all ports that were doing it wrong prior to the keyword

CR:		D208
Reviewed by:	antoine
With hat:	portmgr
2bacde9c3b
Baptiste Daroussin (bapt) · 5.0.5
Update my ports to the latest infrastructure changes
b2bb033360
Baptiste Daroussin (bapt) · 5.0.5
Fix properties on pkg-plist
e04b632220
Baptiste Daroussin (bapt) · 5.0.5
Update to 5.0.5
91ffb1cd96
Baptiste Daroussin (bapt) · 5.0.4
Update to 5.0.4
a921c711a6
Baptiste Daroussin (bapt) · 5.0.2_1
Convert to stage, while here, cleanup a bit
a81009fc18
Baptiste Daroussin (bapt) · 5.0.2_1
Add NO_STAGE all over the place in preparation for the staging support (cat: shells)
f6e6105ff8
Baptiste Daroussin (bapt) · 5.0.2_1
- Fix a typo in configure arguments - Bump port revision as it concerns a default option

Submitted by:	Paul Mulders <justinkb@gmail.com> (by private mail)
10cee3fd8a
Baptiste Daroussin (bapt) · 5.0.2
Fix a confusion

Reported by:	wg
b962befb99
Baptiste Daroussin (bapt) · 5.0.2
Use new helpers
aff2ff05fa
Baptiste Daroussin (bapt) · 5.0.2
Adopt USES=ncurses
1c24d964d5
Marcus von Appen (mva) · 5.0.2
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and   USE_GETTEXT=yes to USES=gettext while here
95e7081976
Eitan Adler (eadler) · 5.0.2
Variable that start with _ are considered private to the defining makefile and may not be used by ports makefiles. In addition, avoid problems should the defaults ever change.

Approved by:	portmgr (tabthorpe)
b7b9ec7a12
Baptiste Daroussin (bapt) · 5.0.2
- update to 5.0.2
47979576c1
Baptiste Daroussin (bapt) · 5.0.1
- update to 5.0.1
c5eb15edbf
Martin Matuska (mm) · 5.0.0_1
Update PCRE to 8.32 Introduces the UTF-32 library pcre32 Bump PORTREVISION in dependent ports
b2c4fbb77a
Baptiste Daroussin (bapt) · 5.0.0
- Add the documentation to distinfo [1] - Fix plist

Reported by:	zi [1]
2d31e9fdbc