CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

mail/cyrus-imapd25 2.5.17_7

Cyrus mail server, supporting POP3 and IMAP4 protocols

0
unaddressed
2
VuXML only
2
fixed
1
open problem reports

Port info

Maintainer
ume@FreeBSD.org
Packages
latest: 2.5.17_7
Upstream
up to date
Last update
to 2.5.17_7 · 6a1d45c289
Quarterly
2026Q4: 2.5.17_7
WWW
https://www.cyrusimap.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install cyrus-imapd25
installs 2.5.17_7 from latest; from quarterly (2026Q4) 2.5.17_7
Port
# cd /usr/ports/mail/cyrus-imapd25 && make install clean
# make -C /usr/ports/mail/cyrus-imapd25 config  # change options first
Size
1.3 MiB download · 5.4 MiB installed
Depends on
devel/pcre 8.45_4, lang/perl5.42 5.42.3, security/cyrus-sasl2 2.1.28_6
License
BSD4CLAUSE
Options
4 of 19 on in the package: DOCS EXAMPLES GSSAPI_BASE IDLED
Show the 15 options that are off
AUTOCREATE BDB CLAMAV GSSAPI_HEIMDAL GSSAPI_MIT HTTP LDAP MURDER MYSQL NETSCAPEHACK NNTP PGSQL REPLICATION SNMP SQLITE
pkg-message
Shown after installing
To setup mail spool, modify /usr/local/etc/imapd.conf appropriately,
then run /usr/local/cyrus/bin/mkimap.
To run Cyrus IMAPd from startup, add cyrus_imapd_enable="YES" in your
/etc/rc.conf.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.5.17_72.5.17_7–
FreeBSD 152.5.17_72.5.17_7–
FreeBSD 142.5.17_72.5.17_72.5.17_7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.5.17_72.5.17_7–
FreeBSD 142.5.17_72.5.17_72.5.17_7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (0)

The CVE record lists the packaged version 2.5.17_7 as affected, and no VuXML entry names the CVE. What does this mean?

None.

VuXML only (2)

Listed in VuXML, the packaged version 2.5.17_7 is still in the affected range; pkg audit reports it. What does this mean?

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297569maintainer-feedback? mail/cyrus-imapd25: resolve outstanding vulnerabilitiesNew2026-08-16

Commits (89)

Hajimu UMEMOTO (ume) · 2.5.9
- Update to 2.5.9 - Use USES=ssl
60b91f1a56
Hajimu UMEMOTO (ume) · 2.5.8
Update to 2.5.8.
f9c5e6b153
Dmitry Marakasov (amdmi3) · 2.5.7_2
- Fix trailing whitespace in pkg-descrs, categories [g-n]*

Approved by:	portmgr blanket
4e942b6419
Hajimu UMEMOTO (ume) · 2.5.7_2
Use USES=bdb and USES=mysql.
dc4d5f48f0
Hajimu UMEMOTO (ume) · 2.5.7_2
Remove needless MURDER_CFLAGS since r38220.
f73471a19d
Mathieu Arnold (mat) · 2.5.7_2
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Hajimu UMEMOTO (ume) · 2.5.7_2
Add missing dependency to pkgconfig when HTTP option is on.
59888ff875
Mathieu Arnold (mat) · 2.5.7_2
Fix build on 9.

Pointy hat on:	ume
Sponsored by:	Absolight
d3daf37d76
Hajimu UMEMOTO (ume) · 2.5.7_2
- Don't install garbage into DOCSDIR. - Rework handling of conf files.
46153dd826
Hajimu UMEMOTO (ume) · 2.5.7_1
Install cyrus.conf and imapd.conf even when EXAMPLES is off.

Spotted by:	Karl Pielorz <kpielorz_lst__at__tdx.co.uk>
b2b49483c5
Hajimu UMEMOTO (ume) · 2.5.7_1
Use gssapi related descriptions in bsd.options.desc.mk.
4bc3dd8ab6
Baptiste Daroussin (bapt) · 2.5.7_1
Convert categories m* and m* to USES=sqlite and USES=firebird
72a6ab7988
Mathieu Arnold (mat) · 2.5.7_1
Fix usage of ${PERL5}.

${PERL5} points to a specific version of perl, say, perl5.22.1, it is
fine to use it in a ports Makefile to do Perly things, but ports using
it must use ${PERL}, that points to /usr/local/bin/perl so that if the
minor version is updated, the shebang keep working.

While there, make some ports use shebangfix, regen a few patches, and
bump PORTREVISION where a shebang went from PERL5 to PERL.

PR:		205367
With hat:	portmgr
Sponsored by:	Absolight
7c47779cb9
Hajimu UMEMOTO (ume) · 2.5.7
Fix build on 9.X.

Reported by:	Andrea Venturoli <ml__at__netfence.it>
daa36bfe2b
Hajimu UMEMOTO (ume) · 2.5.7
Update to 2.5.7. This release fixes CVE-2015-8077 and CVE-2015-8078.

MFH:		2015Q4
Security:	d62ec98e-97d8-11e5-8c0e-080027b00c2e
be0298fbdc
Jimmy Olgeni (olgeni) · 2.5.6
Remove trailing whitespace from Makefiles, M-X.
eb8748beda
Mathieu Arnold (mat) · 2.5.6
Make it so that the default Perl is always called perl5.

- Move Perl's man1 files along with its man3 files.
- Move where Perl installs its modules man1 pages.
- Convert the ports installing man1 pages.
- Make different Perl versions installable at the same time.
  Though you should note that only the default version can be used to
  install Perl modules, and the non default Perl versions cannot use the
  modules installed via ports if they contain .so as they are installed
  in a version specific directory.

Reviewed by:	bapt (the Mk bits)
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3542
afae652a2a
Mathieu Arnold (mat) · 2.5.6
Put back man pages definitions in the Makefile.

Requested by:	maintainer
Sponsored by:	Absolight
5227e46eda
Mathieu Arnold (mat) · 2.5.6
Fix plist with NNTP and HTTP.

Sponsored by:	Absolight
15cb57fde8
Mathieu Arnold (mat) · 2.5.6
Cleanup and modernization of mail/cyrus-imapd2*.

With hat:	portmgr
Sponsored by:	Absolight
e13159a9da
Hajimu UMEMOTO (ume) · 2.5.6
Update to 2.5.6.
ea85f829b8
Hajimu UMEMOTO (ume) · 2.5.5
Update to 2.5.5.
e8e6667acb
Hajimu UMEMOTO (ume) · 2.5.4
Update to 2.5.4.
89c74e8a9d
Hajimu UMEMOTO (ume) · 2.5.3
Update to 2.5.3.
45544093fe
Hajimu UMEMOTO (ume) · 2.5.2
Update to 2.5.2.
2113d0df5b
Hajimu UMEMOTO (ume) · 2.5.1_1
Drop @dirrm* from plist.
381116e12f
Hajimu UMEMOTO (ume) · 2.5.1_1
- Disable GSSAPI_BASE on 8.X.  It seems configure fails to detect   libkrb5 on it. [1] - Suppress empty share/doc/cyrus-imapd/man directory. - Since vzic is not built now, we don't need to depend upon glib20.

Spotted by:	pkg-fallout [1]
cf83075daf
Hajimu UMEMOTO (ume) · 2.5.1
Add new patch to need for 2.5.1.
5958b7459c
Hajimu UMEMOTO (ume) · 2.5.1
Update to 2.5.1.
fa62ae1565
Hajimu UMEMOTO (ume) · 2.5.0_2
Add CPE information.
d996228059
Mathieu Arnold (mat) · 2.5.0_2
Remove OSVERSION checks that do not make sense any more.

For example (${OSVERSION} >= 900000 && ${OSVERSION} < 900021) is always true,
as is (${OSVERSION} > 900002 || ${OSVERSION} < 900000 && ${OSVERSION} > 800107).

Regarding patches, when an EXTRA_PATCHES is no longer needed, I remove it, when
it is always needed, I renamed it, in one case, I merged two patches.

Differential Revision:	https://reviews.freebsd.org/D2209
0438143249
Hajimu UMEMOTO (ume) · 2.5.0_2
Specify GSSAPIBASEDIR explicitly even with heimdal in base.
e8e858daf4
John Marino (marino) · 2.5.0_2
mail category: Remove $PTHREAD_LIBS

Note: The following ports did not pass check-plist (CP) or stage-qa (QA)
tests.   The sendmail port has many problems, but this was already known
by myself as I fixed it properly on DPorts last week.  It's a forward
action to submit a PR against mail/sendmail.

  * antivirus-milter (CP)
  * dk-milter        (CP)
  * milter-regex     (CP)
  * sendmail         (CP, QA)

approved by:	PTHREAD blanket
90e3f72974
Hajimu UMEMOTO (ume) · 2.5.0_2
Option 'autocreatequota' is deprecated in favor of 'autocreate_quota'.

Spotted by:	Paul Dekkers <paul.dekkers__at__surfnet.nl>
bb6359e8a5
Hajimu UMEMOTO (ume) · 2.5.0_1
Use USES=gssapi.
fc95d3be8f
Hajimu UMEMOTO (ume) · 2.5.0_1
Make it buildable with both HTTP and SQLITE enabled.

Spotted by:	Paul Dekkers <paul.dekkers__at__surfnet.nl>
2f76778f2f
Hajimu UMEMOTO (ume) · 2.5.0_1
Make it buildable with HTTP option enabled.
cf6da1a3d6
Hajimu UMEMOTO (ume) · 2.5.0_1
Install more files which were added in 2.5.X.
bf5a8c3a26
Hajimu UMEMOTO (ume) · 2.5.0
Add initial support for Cyrus-IMAPd 2.5.0. HTTP support doesn't work yet.
560a24304a
« newest← newerpage 2 of 2