CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

shells/zsh 5.9.2

The Z shell

Port info

Maintainer
bapt@FreeBSD.org
Packages
latest: 5.9.2
Upstream
up to date
Last update
to 5.9.2 · 587b444789
Quarterly
2026Q4: 5.9.2
Formerly
shells/zsh+euc_hack until 2006-09-01
WWW
https://www.zsh.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install zsh
installs 5.9.2 from latest; from quarterly (2026Q4) 5.9.2
Port
# cd /usr/ports/shells/zsh && make install clean
# make -C /usr/ports/shells/zsh config  # change options first
Size
5.0 MiB download · 20 MiB installed
Depends on
nothing
License
ZSH
Options
2 of 7 on in the package: DOCS EXAMPLES
Show the 5 options that are off
DEBUG ETCDIR GDBM PCRE STATIC
pkg-message
Shown after installing
==========================================================

By default, zsh looks for system-wide defaults in
/usr/local/etc.

If you previously set up /etc/zprofile, /etc/zshenv, etc.,
either move them to /usr/local/etc or rebuild zsh with the
ETCDIR option enabled.

==========================================================

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.9.25.9.2–
FreeBSD 155.9.25.9.2–
FreeBSD 145.9.25.9.25.9.2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.9.25.9.2–
FreeBSD 145.9.25.9.25.9.2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.9.2.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (4) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
287149maintainer-feedback? shells/zsh: does not clean temporary files anymoreNew2025-05-29
278380maintainer-feedback? shells/zsh: Consider making PCRE=on the defaultNew2024-10-10
278817maintainer-feedback? shells/zsh: HTML documentation is mostly missingNew2024-05-06
269292maintainer-feedback? shells/zsh fails to reset tty state on TMOUTNew2023-02-02

Commits (277)

Dag-Erling Smørgrav (des) · 4.3.6_3
The ncurses fix from early May was only partly correct.  The configure script arrived at the correct value for ZSH_NO_XOPEN, but since autoheader did not run, it did not propagate to config.h.  Add autoheader to the USE_AUTOTOOLS list to correct this.
170e7b32c3
Dag-Erling Smørgrav (des) · 4.3.6_2
Explicitly disable multibyte support if the user doesn't want it.

PR:		ports/122510
Submitted by:	Jeff Blank <jfb@mr-happy.com>
20c9bb3e5d
Renato Botelho (garga) · 4.3.6_1
- Fix segmentation fault on completion - Bump PORTREVISION

PR:		ports/123490
Submitted by:	garga
Approved by:	maintainer timeout (2 weeks)
5186c7bfb3
Dag-Erling Smørgrav (des) · 4.3.6
Better version of the previous commit, with an unconditional patch this time.  The patch has been submitted upstream.
897e6fca5b
Dag-Erling Smørgrav (des) · 4.3.6
An additional patch is required to build zsh on FreeBSD releases with the old ncurses (6.2 and older).
ffbc104093
Dag-Erling Smørgrav (des) · 4.3.6
Upgrade to 4.3.6, with kind assistance from Baptiste Daroussin <baptiste.daroussin@gmail.com>

PR:		ports/122116
54df038457
Dag-Erling Smørgrav (des) · 4.3.4_3
Assume maintainership.

Approved by:	maintainer timeout, portmgr (linimon)
0702eff637
Dag-Erling Smørgrav (des) · 4.3.4_3
Add vendor patch to fix subversion command completion.

Approved by:	maintainer timeout
e5dda08f1b
Ade Lovett (ade) · 4.3.4_2
Since zsh calls autoheader as part of the build phase:

===>  Building for zsh-4.3.4_2
	cd . && autoheader

Include the autoconf-2.61 environment to actually allow this thing
to build.
f08f4b47c2
Sergei Kolobov (sergei) · 4.3.4_2
- Add Peter Stephenson's patch from Zsh CVS repo that adds (un)setenv()   detection. This fixes the issue on 7-CURRENT where Zsh was manipulating   environment directly in conflict with the new *env() functions:      http://lists.freebsd.org/pipermail/freebsd-current/2007-July/075538.html   6-STABLE continues to works correctly.

More info about the patch:
     http://www.zsh.org/mla/workers/2007/msg00619.html

- Fix completions for locate(1), mount(8), umount(8) to avoid some linuxisms
  and do the right thing under FreeBSD

PR:		ports/115094, ports/115702
Submitted by:	Sean C. Farley (scf)
91fa081e73
Edwin Groothuis (edwin) · 4.3.4_1
Remove always-false/true conditions based on OSVERSION 500000
13441eac4b
Renato Botelho (garga) · 4.3.4_1
- Add USE_LDCONFIG and fix last commit, zsh binary depends of a shared library. - Bump PORTREVISION
2aaf09db8f
Renato Botelho (garga) · 4.3.4
- Update to 4.3.4 - Pet a bit portlint - OPTION'ify - Add PCRE support OPTION off by default - Add more MASTER_SITES - Remove ?= from MAINTAINER and COMMENT since there are no more slave ports - Remove CONFLICTS since conflicting ports doesn't exist anymore - Fix iconv detection and add USE_ICONV=yes - Use PORTDOCS and PORTEXAMPLES and cleanup pkg-plist - Respect NOPORTEXAMPLES - Add csup, portsna

Reviewed by:	sergei@
Approved by:	sergei@ (maintainer)
cf7b6f9465
Sergei Kolobov (sergei) · 4.3.2_1
- Use proper NO_SHARED knob instead of obsoleted NOSHARED

PR:		ports/108327
Submitted by:	Josh Carroll (floyd AT pflog DOT net)
8d6718db8f
Pav Lucistnik (pav) · 4.3.2_1
- Remove dead and duplicite download locations, move a fast one to the top

PR:		ports/104948
Submitted by:	Geoff C. Wing <gcw@zsh.org>
Approved by:	maintainer timeout (sergei; 3 weeks)
b87453fc01
Sergei Kolobov (sergei) · 4.3.2_1
- Add a patch from Zsh CVS to fix a bug with acroread(1) completion:   http://zsh.cvs.sourceforge.net/zsh/zsh/Completion/X/Command/_acroread?r1=1.5&r2=1.6

PR:		ports/100614
Submitted by:	Simon Olofsson <simon at olofsson dot de>
c521388f4c
Akinori MUSHA (knu) · as shells/zsh+euc_hack
This port has served its purpose.  Just use the shells/zsh port with the multibyte option turned on.
a4b373bb16
Sergei Kolobov (sergei) · 4.3.2
- Fix build under 4.x:   FreeBSD 4.x doesn't have wide character support,   so avoid adding --enable-multibyte to CONFIGURE_ARGS on FreeBSD 4.x

PR:		ports/96645 [1]
Submitted by:	Tod McQuillin <devin@spamcop.net> [1],
		Hajimu UMEMOTO <ume@FreeBSD.org> (in private e-mail)
f6ea5c7be9
Sergei Kolobov (sergei) · 4.3.2
- Update to 4.3.2 [1], [3] - Enable multibyte character support in Zsh by default [3], [4] - Added new knob (WITHOUT_ZSH_MULTIBYTE) to disable multibyte support - Fix zsh.info installation that was previously attempted before "su"   (and thus could fail when running "make install" under a regular user) [2] -   apply a different fix, though - move zsh.info generation from pre-install   to post-buil

PR:		ports/95970 [1], ports/94205 [2]
Submitted by:	Martin Wilke <freebsd@unixfreunde.de> [1],
		Michael Kuhn <mkuhn.nw@web.de> [2]
		umei [3] (in private e-mail),
		"J.R. Oldroyd" <jr@opal.com> [4] (in private e-mail)
1951f82570
Sergei Kolobov (sergei) · 4.2.6
- Update to 4.2.6, the latest stable release

PR:		ports/89992 [1]
Submitted by:	KIMURA Yasuhiro <yasu at utahime dot org> [1],
		osa (in private e-mail)
e5749c72ec
Edwin Groothuis (edwin) · 4.2.5_1
Remove install-info from Makefile, it's automatically done when INFO is defined
fd3176ded7
Sergei Kolobov (sergei) · 4.2.5_1
- Add SHA256 checksums to my ports
a66a28cbd3
Mark Linimon (linimon) · as shells/zsh+euc_hack
With portmgr hat on, reset maintainership of knu's ports since he has been inactive more than 6 months.  We hope to see him back sometime.
34da9bdf57
Sergei Kolobov (sergei) · 4.2.5_1
- Stop adding rzsh (restricted zsh) to /etc/shells [1]:   rzsh(1) is the restricted version of zsh(1), with various things disabled   so as to provide a strictly limited access to the system.   A user with a shell in /etc/shells can use chsh(1) to change their shell,   can use FTP, can use other file-transfer services, etc. Thus, adding rzsh   to /etc/shells could be a security risk in certain con

PR:		ports/82066 [2], ports/83023 [3]
Submitted by:	Phil Pennock <pdp@nl.demon.net> [1]
		Ulrich Spoerlein <q@galgenberg.net> [2] [3]
4af6572b3c
Mark Linimon (linimon) · 4.2.5
Remove mastersite which has gone away.

Approved by:	maintainer
2d10faf2fd
Sergei Kolobov (sergei) · 4.2.5
- Update to 4.2.5 - Update MASTER_SITES based on the list at http://www.zsh.org/

PR:		ports/79708
Submitted by:	KIMURA Yasuhiro <yasu@utahime.org>
96feb9b584
David E. O'Brien (obrien) · 4.2.4
At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.
c3d8037aeb
David E. O'Brien (obrien) · 4.2.4
Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
f2fc2d60ae
Sergei Kolobov (sergei) · 4.2.4
- Update to 4.2.4

PR:		ports/77172
Submitted by:	KIMURA Yasuhiro <yasu@utahime.org>
7467ae3d62
Sergei Kolobov (sergei) · 4.2.3
- Update to 4.2.3

PR:		ports/76268
Submitted by:	KIMURA Yasuhiro <yasu@utahime.org>
70f7fd9950
Sergei Kolobov (sergei) · 4.2.1
- Fix package build on pointyhat and other environments where   there is no controlling tty by adding --with-tcsetpgrp argument   to CONFIGURE_ARGS

Pointed by:	pointyhat (via kris, krion)
Submitted by:	eik (based on)
Approved by:	portmgr (eik)
09bcb2273b
Sergei Kolobov (sergei) · 4.2.1
- Move a faster site (archive.progeny.com) to the beginning   of MASTER_SITES list because the primary distribution site   zsh.org is "always damn slow"

Prompted by:	krion
26a7578418
Sergei Kolobov (sergei) · 4.2.1
- Remove dead mirrors, add few new ones

PR:		ports/70578 (also contains 4.2.1 update)
Submitted by:	KIMURA Yasuhiro <yasu@utahime.org>
9aba722079
Sergei Kolobov (sergei) · 4.2.1
- Update to 4.2.1 [1] - Install rzsh - restricted-mode zsh [2] - Fix static version (NOSHARED=yes) build [3] - Utilize INFO macro again

Submitted by:	osa [1], ceri [2],
		Dan Nelson <dnelson@allantgroup.com> [3]
bd1ed6e42b
Volker Stolz (vs) · 4.2.0
Fix packaging w/ NOSHARED.

PR:		ports/65468
Submitted by:	Dimitry Andric
Approved by:	maintainer timeout
7e857913fd
Norikatsu Shigemura (nork) · 4.2.0
Fix MASTER_SITES.

PR:		ports/66867
Submitted by:	Roman Neuhauser <neuhauser@chello.cz>
Approved by:	maintainer timeout(3 weeks)
34ef1d3e07
Akinori MUSHA (knu) · as shells/zsh+euc_hack
Add a patch to fix a minor bug with deleting a multibyte character at BOL.
03d8d03e83
Sergei Kolobov (sergei) · 4.2.0
- Update to 4.2.0 [1] - Fix a bug introduced in the previous commit when trying to utilize INFO   macro: zsh.info was not added to generated pkg-plist because it is   installed via post-install target, while pkg-plist is updated in   add-plist-info target which gets run earlier. Revert to previous behavior   of explicitly listing this single zsh.info file in pkg-plist for now.   Thanks to Dimitry 

PR:		ports/64499 [1], ports/64540
Submitted by:	KIMURA Yasuhiro <yasu@utahime.org> [1],
		Dimitry Andric <dimitry@andric.com> [2]
9ae19b8850
Sergei Kolobov (sergei) · 4.0.9
SIZE *DOES* MATTER.
ee6478c3fc
Sergei Kolobov (sergei) · 4.0.9
- Update to 4.0.9 - Temporarily switch to gzipped tarballs - Utilize INFO
b98be73a9f
Sergei Kolobov (sergei) · 4.0.7
Change to my @FreeBSD.org address.

Approved by:	krion
b5ac288585
Edwin Groothuis (edwin) · 4.0.7
[patch][non-maintainer] remove dead master site from shells/zsh

Per Fenner's logs, ftp://uiarchive.uiuc.edu disappeared around
        July 22nd of this year.  It should be removed from this port.

PR:		ports/57563
Submitted by:	Mark Linimon <linimon@lonesome.com>
03b9396d76
Sergey A. Osokin (osa) · 4.0.7
Fix NOSHARED (produce static executable)

Noticed by:	Dan Nelson
Submitted by:	Sergei Kolobov <sergei@kolobov.com> (maintainer)
PR:		54699, 54700
893b6ff7ec
Will Andrews (will) · 4.0.7
Update to 4.0.7 and turn over this port to the submitter.  This update includes a large number of new options as well.

PR:		53512
Submitted by:	Sergei Kolobov <sergei@kolobov.com>
49f332b8cf
Akinori MUSHA (knu) · 4.0.6
De-pkg-decomment zsh master-slave ports.  Allow overriding MAINAINER while I'm hre.
2cbde522d4
Kris Kennaway (kris) · as shells/zsh+euc_hack
Convert COMMENT to COMMENTFILE until these ports can be converted.

Submitted by:	lioux
02baa4219f