CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

sysutils/rundeck 6.2.1

Web-console for dispatching commands and scripts to your nodes

Port info

Maintainer
xavier@groumpf.org
Packages
latest: 6.2.1
Upstream
Higher version available: 7.0.1
Last update
to 6.2.1 · 7100b86c78
Quarterly
2026Q4: 6.2.1 · last MFH f51f8da4ef
Formerly
sysutils/rundeck3 until 2023-09-23
WWW
https://www.rundeck.com/
Links
cgit · VuXML

Install

Package
# pkg install rundeck
installs 6.2.1 from latest; from quarterly (2026Q4) 6.2.1
Port
# cd /usr/ports/sysutils/rundeck && make install clean
Size
201 MiB download · 235 MiB installed
Depends on
java/openjdk25 25.0.4+7.f.1_1
License
APACHE20
Creates
user rundeck, group rundeck

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 166.2.16.2.1–
FreeBSD 156.2.16.2.1–
FreeBSD 146.2.16.2.16.2.1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 156.2.16.2.1–
FreeBSD 146.2.16.2.16.2.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 6.2.1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (51)

Vladimir Druzenko (vvd) · 6.2.1 MFH 2026Q4 ✓
sysutils/rundeck: Update 5.20.1 => 6.2.1

Release Notes:
https://docs.rundeck.com/docs/history/6_x/version-6.0.0.html
https://docs.rundeck.com/docs/history/6_x/version-6.0.1.html
https://docs.rundeck.com/docs/history/6_x/version-6.1.0.html
https://docs.rundeck.com/docs/history/6_x/version-6.2.0.html
https://docs.rundeck.com/docs/history/6_x/version-6.2.1.html

PR:		297022
Sponsored by:	UNIS Labs (vvd)
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q4
7100b86c78
Vladimir Druzenko (vvd) · 5.20.1
sysutils/rundeck: Update 5.20.0 => 5.20.1

Release Notes:
https://docs.rundeck.com/docs/history/5_x/version-5.20.1.html

PR:		295411
Sponsored by:	UNIS Labs
cc424fbb9d
Yusuf Yaman (nxjoseph) · 5.20.0
sysutils/rundeck: Fix rc script startup

The fix is to remove ${rc_arg} from the su invocation in rundeck_start().
The JAR is invoked directly via daemon(8) and does not need nor support
rc(8)-style subcommands.

PR:		294978
Reported by:	Steffen <steffen@fritz.wtf>
Approved by:	Xavier Humbert <xavier@groumpf.org> (maintainer)
MFH:		2026Q2
36b5f8761a
Vladimir Druzenko (vvd) · 5.20.0
sysutils/rundeck: Update 5.19.0 => 5.20.0

Release Notes:
https://docs.rundeck.com/docs/history/5_x/version-5.20.0.html

PR:		294774
Security:	CVE-2025-48924
Security:	CWE-770
Sponsored by:	UNIS Labs
MFH:		2026Q2
52e574ac86
Ronald Klop (ronald) · 5.19.0_3
*/*: bump portrevision for openjdk dependency change

Other USES=java ports use JAVA_DEFAULT or are pinned to a specific version.

PR:	293756
4bc030c701
Ronald Klop (ronald) · 5.19.0_2
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 5.19.0_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Vladimir Druzenko (vvd) · 5.19.0
sysutils/rundeck: Update 5.18.0 => 5.19.0

Release Notes:
https://docs.rundeck.com/docs/history/5_x/version-5.19.0.html

PR:		293222
Security:	CVE-2025-69223
Security:	CVE-2025-69227
Security:	CVE-2025-69228
Security:	CVE-2025-4673
Security:	CVE-2025-22872
Security:	CVE-2025-47906
MFH:		2026Q1
1e3c0b322b
Vladimir Druzenko (vvd) · 5.18.0
sysutils/rundeck: Update 5.17.0 => 5.18.0

Release Notes:
https://docs.rundeck.com/docs/history/5_x/version-5.18.0.html

PR:		291890
Security:	CVE-2025-8916
Security:	CVE-2025-53864
Security:	CVE-2025-59250
Security:	CVE-2025-64756
MFH:		2025Q4
8d393b611a
Yasuhiro Kimura (yasu) · 5.17.0
sysutils/rundeck: Update to 5.17.0

ReleaseNotes:	https://docs.rundeck.com/docs/history/5_x/version-5.17.0.html
7bfb0ac9a5
Vladimir Druzenko (vvd) · 5.15.0
sysutils/rundeck: Update 5.8.0 => 5.15.0, take maintainership

Release Notes:
https://docs.rundeck.com/docs/history/5_x/version-5.9.0.html
https://docs.rundeck.com/docs/history/5_x/version-5.10.0.html
https://docs.rundeck.com/docs/history/5_x/version-5.10.1.html
https://docs.rundeck.com/docs/history/5_x/version-5.11.0.html
https://docs.rundeck.com/docs/history/5_x/version-5.12.0.html
https://docs.rundeck.com/docs/history/5_x/version-5.13.0.html
https://docs.rundeck.com/docs/history/5_x/version-5.14.0.html
https://docs.rundeck.com/docs/history/5_x/version-5.14.1.html
https://docs.rundeck.com/docs/history/5_x/version-5.15.0.html

Improve port:
- Add EXTRACT_ONLY= - no need to unpack war file.
- New version support JAVA 11 and 17 only.
- Remove CONFLICTS_INSTALL=rundeck2 - it has been removed from ports.
- Parametrize rundeck with ${PORTNAME}.
- Fix plist: RUNDECK_USER can be changed, but the name of the installed
  war file will always be ${PORTNAME}.war.

PR:		289391
Security:	CVE-2024-52046
Security:	CVE-2023-45288
Security:	CVE-2024-47554
Security:	CVE-2025-24970
Security:	CVE-2023-3635
Security:	CVE-2024-7254
Security:	CVE-2024-6104
Security:	CVE-2024-45337
Security:	CVE-2025-22870
Security:	CVE-2024-24786
Security:	CVE-2024-57699
Security:	CVE-2019-17571
Security:	CVE-2025-22228
Security:	CVE-2025-48734
Security:	CVE-2025-48976
Security:	CVE-2025-7783
Security:	CVE-2025-55163
Security:	CVE-2024-21538
Security:	CVE-2022-38749
Security:	CVE-2024-25710
Security:	CVE-2019-5427
Security:	CVE-2024-8184
Security:	CVE-2020-26939
Security:	CVE-2025-4949
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2025Q3
cf105741a2
Fernando Apesteguía (fernape) · 5.8.0
sysutils/rundeck: update to 5.8.0-20241205

PR:		283846
Reported by:	xavier@groumpf.org
af59cfef24
Muhammad Moinur Rahman (bofh) · 4.17.3
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Fernando Apesteguía (fernape) · 4.17.3
sysutils/rundeck: Update to 4.17.3

PR:		275331
Reported by:	xavier@groumpf.org
5936498bc9
Muhammad Moinur Rahman (bofh) · 4.16.0
sysutils/rundeck*: Update version 3.4.10=>4.16.0

- Move to sysutils/rundeck. As there is only one version there is no
  point in having a pkg with suffix
- Remove DEPRECATED and EXPIRATION
6baefd7955
Muhammad Moinur Rahman (bofh) · 3.4.10 · as sysutils/rundeck3
*/*: Refactor java/openjdk7 removal

- java/openjdk7* has been removed from the tree since 2022-09-03 however
  the relevant codebases in bsd.java.mk has not been removed and the
  consumers has also not been updated to use the next jdk version. This
  commit updates all relevant consumers to use JAVA_VERSION=8 instead of
  JAVA_VERSION=1.7
- Since the introduction of jdk version 18 it looks like similar with
  jdk version 8(java version string 1.8). This is prone to error as it
  looks similar and is only seperated by a '.'. Remove using
  JAVA_VERSION with dotted fomat of java version string and update all
  consumers to utilize version 8 instead of 1.8.

Approved by:	portmgr (blanket)
4cda17ab14
Robert Clausecker (fuz) · 3.4.10 · as sysutils/rundeck3
sysutils/rundeck3: deprecate port

Upstream support ends 2023-03-23 and our maintainer has rescinded
maintainership.  Deprecate and expire in 6 months.

See also:	https://docs.rundeck.com/docs/history/release-calendar.html
See also:	D38635
Reported by:	flo
Approved by:	flo (mentor)
Differential Revision: https://reviews.freebsd.org/D38687
9ee84f3343
Robert Clausecker (fuz) · 3.4.10 · as sysutils/rundeck3
sysutils/rundeck{2,3}: drop maintainership

PR:		261748
Approved by:	flo (mentor)
Differential Revision: https://reviews.freebsd.org/D38635
e1d48f6437
Robert Clausecker (fuz) · 3.4.10 · as sysutils/rundeck3
sysutils/rundeck3: update to 3.4.10

- use logging facilities of daemon(8) to enable log rotation
 - simplify DISTNAME generation

Changelog: https://docs.rundeck.com/docs/history/3_4_x/version-3.4.10.html

MFH:		2023Q1
PR:		261748
Security:	27c822a0-addc-11ed-a9ee-dca632b19f10
Reported by:	ruben@verweg.com
Approved by:	eduardo (mentor)
Differential Revision: https://reviews.freebsd.org/D38634
df09fa81db
Stefan Eßer (se) · 3.4.9 · as sysutils/rundeck3
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.4.9 · as sysutils/rundeck3
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Li-Wen Hsu (lwhsu) · 3.4.9 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.4.9

Release notes:
  - Update log4j to 2.17.0

PR:		260615
2eb4e166d9
Li-Wen Hsu (lwhsu) · 3.4.8 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.4.8

Release notes for Rundeck 3.4.5:
  https://docs.rundeck.com/docs/history/3_4_x/version-3.4.5.html
Release notes for Rundeck 3.4.6:
  https://docs.rundeck.com/docs/history/3_4_x/version-3.4.6.html
Release notes for Rundeck 3.4.7:
  https://docs.rundeck.com/docs/history/3_4_x/version-3.4.7.html
  (including preliminary, but not final log4j vulnerability fix)
Release notes for Rundeck 3.4.8:
  https://docs.rundeck.com/docs/history/3_4_x/version-3.4.8.html
  (including final log4j vulnerability fix for CVE-2021-44228 and CVE-2021-45046)

Also pet portclippy

PR:		260500
ce82ccc154
Stefan Eßer (se) · 3.4.4 · as sysutils/rundeck3
sysutils/rundeck3: Add CPE information

Approved by:	portmgr (blanket)
a2b06143c4
Daniel Engberg (diizzy) · 3.4.4 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.4.4

Changelog: https://docs.rundeck.com/docs/history/3_4_x/version-3.4.4.html

PR:		258864
Approved by:	arrowd (mentor)
Differential Revision:	https://reviews.freebsd.org/D32326
b14f3ee013
Mathieu Arnold (mat) · 3.3.10 · as sysutils/rundeck3
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Neel Chauhan (nc) · 3.3.10 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.3.10

Changes: https://docs.rundeck.com/docs/history/3_3_x/version-3.3.10.html

PR:		254061
Submitted by:	Daniel Tihanyi <daniel.tihanyi AT tetragir DOT com> (maintainer)
5a1c7fd52a
Neel Chauhan (nc) · 3.3.9 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.3.9

Changes: https://docs.rundeck.com/docs/history/3_3_x/version-3.3.9.html

PR:		251780
Submitted by:	Daniel Tihanyi <daniel.tihanyi AT tetragir DOT com> (maintainer)
c59523ffe3
Li-Wen Hsu (lwhsu) · 3.3.5 · as sysutils/rundeck3
sysutils/rundeck3: Update to bugfix release 3.3.5

Also:
- Added a new master site and made it primary
  (the Rundeck download page also links to bintray)
- Removed the pkg-plist file and added the contents to the Makefile
- Added OpenJDK 11 to JAVA_VERSION (it's supported by Rundeck since 3.3.0)

PR:		250504
Submitted by:	Daniel Tihanyi <daniel.tihanyi@tetragir.com> (maintainer)
MFH:		2020Q4
c80c058383
Fernando Apesteguía (fernape) · 3.3.4 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.3.4

ChangeLog: https://docs.rundeck.com/docs/history/3_3_x/version-3.3.4.html

PR:	250446
Submitted by:	daniel.tihanyi@tetragir.com (maintainer)
1cb552851f
Danilo G. Baio (dbaio) · 3.3.3 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.3.3

Changelog:	https://docs.rundeck.com/news/2020/09/10/rundeck-3.3.3.html

PR:		249281
Submitted by:	Daniel Tihanyi <daniel.tihanyi@tetragir.com> (maintainer)
179e622bf8
Fernando Apesteguía (fernape) · 3.3.2 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.3.2

ChangeLog: https://docs.rundeck.com/news/2020/08/17/rundeck-3.3.2.html

PR:	248966
Submitted by:	daniel.tihanyi@tetragir.com (maintainer)
c14a297495
Tobias C. Berner (tcberner) · 3.3.1 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.3.1

Changelog:
	Fixed issues:
	- Fix node view output not rendering
	- Fix noisy cache warnings on startup
	- Logs in Node View are broken since 3.3.0
	- Allow a Rundeck server to be set as primary.
	- Update dependencies
	- Fixes when to execute a job using “Remote URL options” #6275
	- Scheduled jobs not running when using Remote URL options and enforcing from allowed values
	- replace ehcache2 with jcache/ehcache3
	- Update snakeyaml to 1.26
	- Reduce console messages in standalone war launch
	- Docker - Add / on rundeck/jaas/file/required
	- Fix #6239 acls not imported during fs conversion upgrading from 3.2 to 3.3
	- Fix activity list options scrolling in FireFox
	- Fix log viewer and adhoc command page in FireFox ESR(68)
	- Fixes API call using asterisk #6069
	- Set ehcache missing cache strategy to ‘create’ to avoid warnings
	- Project ACL’s are gone after upgrading to v3.3
	- Rundeck 3.3.0 - log viewer broken in Firefox
	- Rundeck 3.3.0 node filter broken in Firefox
	- Fix URI parse message on Windows for log4j2 config file
	- Log4j2 path parse error message on Windows startup
	- Open additional modules for reflective access to avoid illegal reflective access warnings
	- Starting Rundeck with a JDK 11+ runtime reports Illegal reflective access errors
	- Add the ability to send webhook notifications in json format
	- Updates an existing plugin when using plugin upload GUI instead of reporting error
	- Ignore the unsupported exception thrown when posix file permissions are set
	- Output Viewer Safari style fixes
	- Ansi color 24 bit support, Fix #6198 bold mode plus 256 color should work
	- Add ability to configure object storage plugin with a region
	- Add region configuration to object store plugin
	- Enhance YAML multiline export functionality
	- Performance enhancement for job takeover process
	- Misinterpreted ANSI escape sequence
	- UI glitch in Jobs activity when using long options names

PR:		248414
Submitted by:	Daniel Tihanyi <daniel.tihanyi@tetragir.com> (maintainer)
14e2b3f9cf
Li-Wen Hsu (lwhsu) · 3.3.0 · as sysutils/rundeck3
Update to 3.3.0

PR:		247767
Submitted by:	Daniel Tihanyi <daniel.tihanyi@tetragir.com> (maintainer)
8780e39c48
Fernando Apesteguía (fernape) · 3.2.8 · as sysutils/rundeck3
sysutils/rundeck3: Update to 3.2.8

ChangeLog: https://docs.rundeck.com/3.2.8/history/3_2_x/version-3.2.8.html

 * Avoiding loading all plugins whenever a method needs to search for a plugin
   description (bp #6091)
 * Fix an issue that caused job execution to get stuck inside a loop when an
   exception was thrown from a log event call (bp #6050)
 * Fix #6065 plugin values should be shown in multivalued list (bp #6066)

PR:	247133
Submitted by:	daniel.tihanyi@tetragir.com (maintainer)
21917bff06
Hiroki Tagato (tagattie) · 3.2.7 · as sysutils/rundeck3
Update to 3.2.7

PR:		246650
Submitted by:	Daniel Tihanyi <daniel.tihanyi@tetragir.com> (maintainer)
Approved by:	mentors (implicit)
Changelog:	https://docs.rundeck.com/docs/history/3_2_x/version-3.2.7.html
3f0ebe9170
Hiroki Tagato (tagattie) · 3.2.6
There is rundeck version 3 available and version 2 is still supported. So it is good to have both versions in the ports. This commit is to: - Add rundeck ver. 3 as rundeck3 - Preserve rundeck ver. 2 as rundeck2 for users who want to stay in version 2 - Pass maintainership to submitter

PR:		246022 246023
Submitted by:	Daniel Tihanyi <daniel.tihanyi@tetragir.com>
Approved by:	arcade@b1t.name (maintainer), pizzamig (mentor)
63a215d0f5
Steve Wills (swills) · 2.11.14
sysutils/rundeck: update to 2.11.14

PR:		241152
Submitted by:	Volodymyr Kostyrko <arcade@b1t.name> (maintainer)
fa923f4a08
Steve Wills (swills) · 2.11.13
sysutils/rundeck: update to 2.11.13

PR:		240220
Submitted by:	Volodymyr Kostyrko <arcade@b1t.name> (maintainer)
8bbb60c108
Steve Wills (swills) · 2.11.8
sysutils/rundeck: update to 2.11.8

PR:		234231
Submitted by:	Volodymyr Kostyrko <arcade@b1t.name> (maintainer)
29e7042e8e
Jochen Neumeister (joneum) · 2.11.7
Update to 2.11.7

Changelog:
ORA-01795 in menu/home when using Oracle Database with over 1000 projects.
Performance improvements with large data sets
fix jobs failing over lock exception on mysql and mariadb

PR:		232322
Submitted by:	Volodymyr Kostyrko <arcade@b1t.name> (maintainer)
Sponsored by:	Netzkommune GmbH
f55915fb4b
Steve Wills (swills) · 2.11.4
sysutils/rundeck update to 2.11.4

PR:		228825
Submitted by:	Volodymyr Kostyrko <arcade@b1t.name> (maintainer)
f1bb55c375
Jochen Neumeister (joneum) · 2.11.3
sysutils/rundeck: Update to 2.11.3

PR:		228725
Submitted by:	Volodymyr Kostyrko <arcade@b1t.name> (maintainer)
9b22fe8be4
Jochen Neumeister (joneum) · 2.10.0
sysutils/rundeck: Update from 2.8.2 to 2.10.0

Change maintainer address

 *While here switch to DISTVERSION

PR:		223061
Submitted by:	c.kworr@gmail.com (maintainer)
Approved by:	rene (mentor)
Differential Revision:	https://reviews.freebsd.org/D12949
ce1ad9f3ec
Martin Wilke (miwi) · 2.8.2
- Update to 2.8.2 - Switch to java 1.8

PR:		218220
Submitted by:	Scott Larson
Approved by:	maintainer
90861b30d1
Larry Rosenman (ler) · 2.3.2_1
Corect pkg-plist %%RUNDESK_GROUP%% -> %%RUNDECK_GROUP%%

Approved by:	adamw (mentor)
MFH:		2017Q1 (blanket)
3d125fe87e
Larry Rosenman (ler) · 2.3.2_1
Change ownership of rundeck/server/lib et al. Address poudriere issues bump PORTREVISION

PR:		202732
Submitted by:	Mark C Ballew (ballew sublinear net)
Approved by:	adamw (mentor)
MFH:		2017Q1 (blanket)
Differential Revision:	https://reviews.freebsd.org/D9205
ece4e3cd03
Thomas Zander (riggs) · 2.3.2
Update to upstream version 2.3.2

PR:		194888
Submitted by:	c.kworr@gmail.com (maintainer)
97dce54033
Thomas Zander (riggs) · 2.2.3
Update to 2.2.3

While on it:
- Remove unnecessary @dir(rmtry) entries

PR:		193839
Submitted by:	arcade@b1t.name (maintainer)
a281eb579e