CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

mail/cyrus-imapd25 2.5.17_7

Cyrus mail server, supporting POP3 and IMAP4 protocols

Port info

Maintainer
ume@FreeBSD.org
Packages
latest: 2.5.17_7
Upstream
up to date
Last update
to 2.5.17_7 · 6a1d45c289
Quarterly
2026Q4: 2.5.17_7
WWW
https://www.cyrusimap.org/
Links
cgit · VuXML

Install

Package
# pkg install cyrus-imapd25
installs 2.5.17_7 from latest; from quarterly (2026Q4) 2.5.17_7
Port
# cd /usr/ports/mail/cyrus-imapd25 && make install clean
# make -C /usr/ports/mail/cyrus-imapd25 config  # change options first
Size
1.3 MiB download · 5.4 MiB installed
Depends on
devel/pcre 8.45_4, lang/perl5.42 5.42.3, security/cyrus-sasl2 2.1.28_6
License
BSD4CLAUSE
Options
4 of 19 on in the package: DOCS EXAMPLES GSSAPI_BASE IDLED
Show the 15 options that are off
AUTOCREATE BDB CLAMAV GSSAPI_HEIMDAL GSSAPI_MIT HTTP LDAP MURDER MYSQL NETSCAPEHACK NNTP PGSQL REPLICATION SNMP SQLITE
pkg-message
Shown after installing
To setup mail spool, modify /usr/local/etc/imapd.conf appropriately,
then run /usr/local/cyrus/bin/mkimap.
To run Cyrus IMAPd from startup, add cyrus_imapd_enable="YES" in your
/etc/rc.conf.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.5.17_72.5.17_7–
FreeBSD 152.5.17_72.5.17_7–
FreeBSD 142.5.17_72.5.17_72.5.17_7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.5.17_72.5.17_7–
FreeBSD 142.5.17_72.5.17_72.5.17_7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (0)

The CVE record lists the packaged version 2.5.17_7 as affected, and no VuXML entry names the CVE. What does this mean?

None.

VuXML only (2)

Listed in VuXML, the packaged version 2.5.17_7 is still in the affected range; pkg audit reports it. What does this mean?

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297569maintainer-feedback? mail/cyrus-imapd25: resolve outstanding vulnerabilitiesNew2026-08-16

Commits (89)

Cy Schubert (cy) · 2.5.17_7
mail/cyrus-imapd*: Use pkgconfig file to test for MIT KRB5 existence

This is better than testing for krb5kdc.

See https://reviews.freebsd.org/D51841.
6a1d45c289
Cy Schubert (cy) · 2.5.17_7
mail/cyrus-imapd25: Add support for MIT KRB5 in base

FreeBSD 15 will ship with MIT KRB5 in base. Detect this accordingly.

PR:		287597
exp-run by:	antoine
2a324f85f0
Rene Ladan (rene) · 2.5.17_6
all: drop support for expired FreeBSD 14.0

Simplify expressions for FreeBSD 13.X

Reviewed by:	many

Differential Revision:	https://reviews.freebsd.org/D46601
4485bd8221
Hajimu UMEMOTO (ume) · 2.5.17_6
mail/cyrus-imapd25: disable BDB option by default and back to not force db18

PR:		279145
Requested by:	des
dbd3f8a154
Hajimu UMEMOTO (ume) · 2.5.17_5
mail/cyrus-imapd25: bump PORTREVISION for my previous commit.
cf70c43a86
Hajimu UMEMOTO (ume) · 2.5.17_4
mail/cyrus-imapd25: don't use db5.  use db18 explicitly.

PR:		279145
Reported by:	diizzy
4f45619632
Hajimu UMEMOTO (ume) · 2.5.17_4
mail/cyrus-imapd*: Remove GNU_CONFIGURE_MANPREFIX after move man pages to share/man
d7817554f4
Hajimu UMEMOTO (ume) · 2.5.17_4
mail/cyrus-imapd25: Make it buildable with db18 on recent FreeBSD.
cc39567544
Hajimu UMEMOTO (ume) · 2.5.17_4
mail/cyrus-imapd*: Restore GNU_CONFIGURE
1c45acea33
Hajimu UMEMOTO (ume) · 2.5.17_3
mail/cyrus-imapd*: Move manpages to ${PREFIX}/share
8a5c357183
Hajimu UMEMOTO (ume) · 2.5.17_2
mail/cyrus-imapd{25,30,32}: Fix build with more recent Perl

PR:		273093
Reported by:	delphij
Submitted by:	delphij
182235082a
Muhammad Moinur Rahman (bofh) · 2.5.17_2
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233
6e1233be22
Yasuhiro Kimura (yasu) · 2.5.17_2
security/clamav: Update to 1.0.0

* Switch to use bundled TomsFastMath library. Upstream made
  incompatible change to bundled copy and this makes it impossible to
  use external one. They also dropped option to use it.
* Bump PORTREVISION of consumers as shlib version is changed.
* Note that though this is new LTS feature release security/clamav-lts
  stays in 0.103.x until either next regular feature release (probably
  1.1.0) is released or 0.103.x reaches its EoL.

ReleaseNotes:	https://blog.clamav.net/2022/11/clamav-100-lts-released.html
f7bcd43826
Stefan Eßer (se) · 2.5.17_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.5.17_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Hajimu UMEMOTO (ume) · 2.5.17_1
mail/cyrus-imapd2[345]: Remove INVALID_BDB_VER

PR:		263013
Reported by:	yasu
793e755318
Stefan Eßer (se) · 2.5.17_1
Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
cannot conflict with itself (due to logic in bsd.port.mk that
supresses the pattern match result in that case).

A few ports that set the conflicts variables depending on complex
conditions (e.g. port options), have been left unmodified, despite
probably containing outdated package names.

These changes should only affect the installation of locally built
ports, not the package building with poudriere. They should give an
early indication of the install conflict in cases where currently
the pkg command aborts an installation when it detects that an
existing file would be overwritten,

Approved by:	portmgr (implicit)
bcaf25a8c8
Mathieu Arnold (mat) · 2.5.17_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.5.17_1
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 2.5.17_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Hajimu UMEMOTO (ume) · 2.5.17_1
better macro checking.

Reported by:	nork
8c616ad339
Hajimu UMEMOTO (ume) · 2.5.17
Update to 2.5.17.
b5772cf886
Mark Linimon (linimon) · 2.5.16
Mark as BROKEN on riscv64.

While here, pet portlint (Makevar order).

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com build testing
5fddee0b53
Hajimu UMEMOTO (ume) · 2.5.16
Update to 2.5.16.
0e7e982e97
Hajimu UMEMOTO (ume) · 2.5.15
Remove obsolete site.
f30bbcc59d
Hajimu UMEMOTO (ume) · 2.5.15
Update to 2.5.15.
9ed1cdd125
Hajimu UMEMOTO (ume) · 2.5.14
Update MASTER_SITES.
6cdb70402b
Hajimu UMEMOTO (ume) · 2.5.14
Update tp 2.5.14
fb965e4501
Tobias Kortkamp (tobik) · 2.5.13
Add USES={gl,gnome,mate,sdl,xorg} missed in the last round
863110e9f9
Baptiste Daroussin (bapt) · 2.5.13
Drop the ipv6 virtual category for m* category as it is not relevant anymore
0be2ce42f1
Mathieu Arnold (mat) · 2.5.13
onvert to UCL & cleanup pkg-message (categories l-m)
558224994b
Hajimu UMEMOTO (ume) · 2.5.13
Update to 2.5.13.
6ef0146e84
Rene Ladan (rene) · 2.5.12
mail/cyrus-imapd25: remove support for expired mail/drac and FreeBSD < 10
3f6e8f8806
Hajimu UMEMOTO (ume) · 2.5.12
Use https to fetch from cyrusimap.org.
0c195c46da
Hajimu UMEMOTO (ume) · 2.5.12
Update to 2.5.12.
f50b99a501
Koop Mast (kwm) · 2.5.11_3
The FreeBSD GNOME team proudly presents GNOME 3.28 for FreeBSD.

The offical GNOME 3.28 release notes can be found at
https://help.gnome.org/misc/release-notes/3.28/

Thanks to Antoine Brodin for running the exp-runs.

PR:		229761
951c1f5d1c
Hajimu UMEMOTO (ume) · 2.5.11_2
cyrus-imapd should start after saslauthd

PR:		228996
Submitted by:	ohauer
699ae1300a
Hajimu UMEMOTO (ume) · 2.5.11_1
add reload to init script

PR:		228992
Submitted by:	Johan Bergström <bugs [...] bergstroem.nu>
9d14b525b8
Hajimu UMEMOTO (ume) · 2.5.11
Fix build with LibreSSL 2.7

PR:		227165
Submitted by:	brnrd
4be94e6744
Don Lewis (truckman) · 2.5.11
Bump PORTREVISION on ports depending on devel/libical.

PR:		226460
1592296a88
Tijl Coosemans (tijl) · 2.5.11
Remove commented reference to USE_AUTOTOOLS.
ab0525195a
Mark Linimon (linimon) · 2.5.11
For ports that are marked BROKEN on armv6, and also fail to build on armv7, mark them so.

This is part two of a multipart commit to bring armv7 ports to parity
with armv6.

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com -exp run
bf43557044
Dmitry Marakasov (amdmi3) · 2.5.11
- Update WWW

Approved by:	portmgr blanket
fec391a46e
Mark Linimon (linimon) · 2.5.11
Mark some ports failing on armv6, for errors classified as "???", part 2.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)
c52a715800
Hajimu UMEMOTO (ume) · 2.5.11
Update to 2.5.11.
1749e0c3c7
Pawel Pekala (pawel) · 2.5.10_1
- Update devel/libical to version 2.0 - Bump PORTREVISION in all consumers - mail/claws-mail-vcalendar now builds, remove IGNORE - Mark devel/libical-glib as BROKEN

Release Highlights
    WARNING: Version 2 IS NOT Binary Compatible with Older Versions
    Version 2 is Source Compatible with Older Versions
    Lots of source code scrubbing
    [New] RSCALE support (requires libicu from http://www.icu-project.org)
    [New] CalDAV attachment support (draft-daboo-caldav-attachments)
    [New] Resurrect the Berkeley DB storage support
    [Bug] issue83: Incorrect recurrence generation for weekly pattern
    Handle RRULEs better
    Handle threading better

PR:		218711
Submitted by:	myself
Approved by:	maintainer timeout
ee6234880d
Hajimu UMEMOTO (ume) · 2.5.10
Add Cyrus IMAP 3.0 series. Now, it is the third release candidate from the Cyrus IMAP 3.0 series: 3.0.0-rc3. As a release candidate, it is considered near-stable for production usage.   Interfaces, APIs, features, etc are not likely to change between now and the full release.
5926bdc0e1
Mathieu Arnold (mat) · 2.5.10
${RM} already has -f.

PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
eabbfd75e3
Hajimu UMEMOTO (ume) · 2.5.10
Update to 2.5.10.
c514df614c
Hajimu UMEMOTO (ume) · 2.5.9
Fix build with recent libressl (2.4.2).

Reported by:	"Dean E. Weimer" <dweimerxi [...] dweimer.net>`
962c853e36