CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

mail/cyrus-imapd30 3.0.18_12

Cyrus mail server, supporting POP3 and IMAP4 protocols

Port info

Maintainer
ume@FreeBSD.org
Packages
latest: 3.0.18_12
Upstream
up to date
Last update
to 3.0.18_12 · 85ba298b7e
Quarterly
2026Q4: 3.0.18_11 1 VuXML
WWW
https://www.cyrusimap.org/
Links
cgit · VuXML

Install

Package
# pkg install cyrus-imapd30
installs 3.0.18_12 from latest; from quarterly (2026Q4) 3.0.18_11
Port
# cd /usr/ports/mail/cyrus-imapd30 && make install clean
# make -C /usr/ports/mail/cyrus-imapd30 config  # change options first
Size
2.9 MiB download · 36 MiB installed
Depends on
databases/sqlite3 3.53.4,1, devel/icu 76.1,1, devel/jansson 2.15.1_1, devel/pcre 8.45_4, lang/perl5.42 5.42.3, security/cyrus-sasl2 2.1.28_6
License
BSD4CLAUSE
Options
6 of 22 on in the package: AUTOCREATE DOCS GSSAPI_BASE IDLED SQLITE SQUAT
Show the 16 options that are off
BACKUP CLAMAV GSSAPI_HEIMDAL GSSAPI_MIT HTTP LDAP LMDB MURDER MYSQL NNTP PGSQL READLINE_GNU READLINE_PERL REPLICATION SNMP XAPIAN
pkg-message
Shown after installing
To setup mail spool, modify /usr/local/etc/imapd.conf appropriately,
then run /usr/local/cyrus/sbin/mkimap.
To run Cyrus IMAPd from startup, add cyrus_imapd_enable="YES" in your
/etc/rc.conf.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.0.18_123.0.18_11–
FreeBSD 153.0.18_123.0.18_11–
FreeBSD 143.0.18_123.0.18_113.0.18_12

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.0.18_113.0.18_11–
FreeBSD 143.0.18_113.0.18_113.0.18_11

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (0)

The CVE record lists the packaged version 3.0.18_12 as affected, and no VuXML entry names the CVE. What does this mean?

None.

VuXML only (1)

Listed in VuXML, the packaged version 3.0.18_12 is still in the affected range; pkg audit reports it. What does this mean?

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (93)

Baptiste Daroussin (bapt) · 3.0.18_12
databases/lmdb: allow to install both 0.x and 1.x together

LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.

Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
  liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc

A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.

Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.

Approved by:	mat (portmgr)
Reviewed by:	mat
Differential Revision:	https://reviews.freebsd.org/D60741
85ba298b7e
Xin LI (delphij) · 3.0.18_11
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530
5f9d389f29
Hajimu UMEMOTO (ume) · 3.0.18_10
mail/cyrus-imapd3*: Bump PORTREVISION due to binary incompatibility of recent devel/jansson update

% sudo -u cyrus /usr/local/cyrus/sbin/ctl_cyrusdb -r
ld-elf.so.1: /usr/local/lib/libjansson.so.4: version JANSSON_4 required by /usr/local/lib/libcyrus_imap.so.0 not defined
54a293b896
Po-Chuan Hsieh (sunpoet) · 3.0.18_9
databases/xapian-core: Update to 2.0.0

- Update CONFLICTS_INSTALL
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://trac.xapian.org/wiki/ReleaseOverview
		https://github.com/xapian/xapian/blob/main/xapian-core/NEWS
36f95e3cfa
Cy Schubert (cy) · 3.0.18_8
mail/cyrus-imapd*: Use pkgconfig file to test for MIT KRB5 existence

This is better than testing for krb5kdc.

See https://reviews.freebsd.org/D51841.
6a1d45c289
Cy Schubert (cy) · 3.0.18_8
mail/cyrus-imapd30: Add support for MIT KRB5 in base

FreeBSD 15 will ship with MIT KRB5 in base. Detect this accordingly.

PR:		287597
exp-run by:	antoine
093a7cd15e
Po-Chuan Hsieh (sunpoet) · 3.0.18_7
databases/xapian-core: Update to 1.4.29

Changes:	https://trac.xapian.org/wiki/ReleaseOverview
		https://github.com/xapian/xapian/blob/RELEASE/1.4/xapian-core/NEWS
5d7ff68d7a
Daniel Engberg (diizzy) · 3.0.18_6
*/*: Bump consumers of devel/icu

...to avoid library mismatches
ff33dd4700
Hajimu UMEMOTO (ume) · 3.0.18_5
mail/cyrus-imapd*: Remove GNU_CONFIGURE_MANPREFIX after move man pages to share/man
d7817554f4
Hajimu UMEMOTO (ume) · 3.0.18_5
mail/cyrus-imapd*: Restore GNU_CONFIGURE
1c45acea33
Hajimu UMEMOTO (ume) · 3.0.18_4
mail/cyrus-imapd*: Move manpages to ${PREFIX}/share
8a5c357183
Po-Chuan Hsieh (sunpoet) · 3.0.18_3
devel/shapelib: Update to 1.6.0

- Add GitHub to MASTER_SITES
- Remove my LOCAL from MASTER_SITES
- Update WWW
- Update LICENSE
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/OSGeo/shapelib/releases
		http://shapelib.maptools.org/release.html
Security:	CVE-2022-0699
45e0a4924c
Jan Beich (jbeich) · 3.0.18_2
devel/icu: update to 74.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-74-1
Reported by:	GitHub (watch releases)
PR:		274317
Exp-run by:	antoine (incomplete)
Approved by:	fluffy
e55b80195e
Hajimu UMEMOTO (ume) · 3.0.18_1
mail/cyrus-imapd{25,30,32}: Fix build with more recent Perl

PR:		273093
Reported by:	delphij
Submitted by:	delphij
182235082a
Jan Beich (jbeich) · 3.0.18_1
devel/icu: update to 73.1

- Temporarily switch to GitHub auto archive (release artifacts are N/A atm)

Changes:	https://github.com/unicode-org/icu/releases/tag/release-73-1
Reported by:	GitHub (watch releases)
PR:		270422
Exp-run by:	antoine
f1f1a8be88
Hajimu UMEMOTO (ume) · 3.0.18
mail/cyrus-imapd30: Update to 3.0.18.
4a3e2d593c
Muhammad Moinur Rahman (bofh) · 3.0.17_3
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233
6e1233be22
Yasuhiro Kimura (yasu) · 3.0.17_3
security/clamav: Update to 1.0.0

* Switch to use bundled TomsFastMath library. Upstream made
  incompatible change to bundled copy and this makes it impossible to
  use external one. They also dropped option to use it.
* Bump PORTREVISION of consumers as shlib version is changed.
* Note that though this is new LTS feature release security/clamav-lts
  stays in 0.103.x until either next regular feature release (probably
  1.1.0) is released or 0.103.x reaches its EoL.

ReleaseNotes:	https://blog.clamav.net/2022/11/clamav-100-lts-released.html
f7bcd43826
Jan Beich (jbeich) · 3.0.17_2
devel/icu: update to 72.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-72-1
Reported by:	GitHub (watch releases)
PR:		266582
Exp-run by:	antoine
dfe25d73e7
Stefan Eßer (se) · 3.0.17_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.0.17_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Jan Beich (jbeich) · 3.0.17_1
devel/icu: update to 71.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-71-1
Reported by:	GitHub (watch releases)
PR:		262654
Exp-run by:	antoine
Approved by:	fluffy
268cee3b02
Hajimu UMEMOTO (ume) · 3.0.17
mail/cyrus-imapd30: Update to 3.0.17
15cd41a7be
Stefan Eßer (se) · 3.0.16_1
Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
cannot conflict with itself (due to logic in bsd.port.mk that
supresses the pattern match result in that case).

A few ports that set the conflicts variables depending on complex
conditions (e.g. port options), have been left unmodified, despite
probably containing outdated package names.

These changes should only affect the installation of locally built
ports, not the package building with poudriere. They should give an
early indication of the install conflict in cases where currently
the pkg command aborts an installation when it detects that an
existing file would be overwritten,

Approved by:	portmgr (implicit)
bcaf25a8c8
Jan Beich (jbeich) · 3.0.16_1
devel/icu: update to 70.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-70-1
Reported by:	GitHub (watch releases)
PR:		258794
Exp-run by:	antoine
f34ece3aa6
Hajimu UMEMOTO (ume) · 3.0.16
mail/cyrus-imapd30: Update to 3.0.16.

Security:	CVE-2021-33582
70db31c614
Jan Beich (jbeich) · 3.0.15_2
devel/icu: update to 69.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-69-1
Reported by:	GitHub (watch releases)
69d24a727d
Mathieu Arnold (mat) · 3.0.15_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 3.0.15_1
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 3.0.15_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Hajimu UMEMOTO (ume) · 3.0.15_1
better macro checking.

Reported by:	nork
8c616ad339
Hajimu UMEMOTO (ume) · 3.0.15
Update to 3.0.15.
84a33b8214
Mark Linimon (linimon) · 3.0.14_1
Mark as BROKEN on riscv64.

While here, pet portlint (Makevar order).

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com build testing
5fddee0b53
Jan Beich (jbeich) · 3.0.14_1
devel/icu: update to 68.1

Changes:	http://site.icu-project.org/download/68
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)
6d5d6429d5
Hajimu UMEMOTO (ume) · 3.0.14
Fix build on 13-CURRENT.
3ac2f54f4c
Hajimu UMEMOTO (ume) · 3.0.14
Update to 3.0.14.
826a6c2193
Jan Beich (jbeich) · 3.0.13_2
devel/icu: update to 67.1

Changes:	http://site.icu-project.org/download/67
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)
ffb8eb82e5
Hajimu UMEMOTO (ume) · 3.0.13_1
Remove obsolete site.
f30bbcc59d
Jan Beich (jbeich) · 3.0.13_1
devel/icu: update to 66.1

Changes:	http://site.icu-project.org/download/66
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
f821cdc347
Hajimu UMEMOTO (ume) · 3.0.13
Update to 3.0.13.
776253543f
Hajimu UMEMOTO (ume) · 3.0.12
Update MASTER_SITES.
6cdb70402b
Hajimu UMEMOTO (ume) · 3.0.12
- Update to 3.0.12 - Fix build with BACKUP option enabled [1]

PR:		241967 [1]
Reported by:	albert.shih [1]
5af03b1381
Tobias Kortkamp (tobik) · 3.0.11_1
Add USES={gl,gnome,mate,sdl,xorg} missed in the last round
863110e9f9
Baptiste Daroussin (bapt) · 3.0.11_1
Drop the ipv6 virtual category for m* category as it is not relevant anymore
0be2ce42f1
Jan Beich (jbeich) · 3.0.11_1
devel/icu: update to 65.1

Changes:	http://site.icu-project.org/download/65
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
4bbb4133b2
Piotr Kubaj (pkubaj) · 3.0.11
mail/cyrus-imapd30: unbreak on armv*

Tested to build fine.

Approved by:	mentors (implicit approval)
5e56abf2ef
Piotr Kubaj (pkubaj) · 3.0.11
mail/cyrus-imapd30: fix build on powerpc64

This port builds just fine on powerpc64 with GCC9.

Approved by:	mentors (implicit approval)
81e6734f80
Mathieu Arnold (mat) · 3.0.11
onvert to UCL & cleanup pkg-message (categories l-m)
558224994b
Hajimu UMEMOTO (ume) · 3.0.11
Update to 3.0.11.
aeac2addd3
Hajimu UMEMOTO (ume) · 3.0.10
Update to 3.0.10.
59af71dea8