all: Remove all other $FreeBSD keywords.135fdeebb9
Fetchmail -- NTLM potential remote code executionentered 2026-09-26
Batch mail retrieval utility for IMAP/POP3/ETRN/ODMR
# pkg install fetchmailinstalls 6.6.9 from latest; from quarterly (2026Q4) 6.6.9# cd /usr/ports/mail/fetchmail && make install clean# make -C /usr/ports/mail/fetchmail config # change options first
fetchmail, group fetchmailFor pointers how to configure fetchmail in daemon mode please consult /usr/local/etc/rc.d/fetchmail.
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 6.6.9 | 6.6.9 | – |
| FreeBSD 15 | 6.6.9 | 6.6.9 | – |
| FreeBSD 14 | 6.6.9 | 6.6.9 | 6.6.9 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 6.6.9 | 6.6.9 | – |
| FreeBSD 14 | 6.6.9 | 6.6.9 | 6.6.9 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 6.6.9.no CVE referenced
no CVE referenced
all: Remove all other $FreeBSD keywords.135fdeebb9
Remove # $FreeBSD$ from Makefiles.305f148f48
mail/fetchmail: update to 6.4.18 (includes mail/fetchmailconf) fetchmail-6.4.18 (released 2021-03-27, 30011 LoC): # REGRESSION FIX: * fetchmailconf: fetchmail 6.4.16 added --sslcertfile to the configuration dump, but fetchmailconf support was incomplete in Git 7349f124 and it could not parse sslcertfile, thus the user settings editor came up empty with console errors printed. Fix configuration parser in fetchmailconf. # ROBUSTNESS FIXES: * fetchmailconf: do not require fetchmail for -V. do not require Tk (Tkinter) for -d option. This is to fail more gracefully on incomplete installs. * TLS code: remove OPENSSL_NO_DEPRECATED macros to avoid portability issues with OpenSSL v3 - these are for development purposes, not production. * TLS futureproofing: use SSL_use_PrivateKey_file instead of SSL_use_RSAPrivateKey_file, the latter will be deprecated with OpenSSL v3, and the user's key file might be something else than RSA. # TRANSLATION UPDATE: This fine person has contributed an updated translation: * fi: Lauri Nurmi [Finnish] PR: 254619 Submitted by: mandree@ Approved by: Corey Halpin (maintainer)ea20e3149e
mail/fetchmail: fetchmailconf: update to 6.4.17 (minor fixes, Japanese translation) # BUG FIXES * IMAP client: plus memory leaks for username and password when trying the LOGIN (password-based) authentication and encountered a timeout situation. * dist-tools/getstats.py: also counts lines in *.py files [for NEWS file] # CHANGES * fetchmail.man: now mentions that you may need to add --ssl when specifying a TLS-wrapped port. * fetchmailconf: --version (-V) now prints the Python version in use. # TRANSLATION UPDATE * ja: Takeshi Hamasaki [Japanese] PR: 254208 Approved by: Corey Halpin (maintainer) MFH: 2021Q1d4c713d909
mail/fetchmail and mail/fetchmailconf: Update to 6.4.16 PR: 253423 Submitted by: Corey Halpin <chalpin AT cs.wisc DOT edu> (maintainer)63e89621a4
mail/fetchmail: Update to 6.4.14 PR: 251979 Submitted by: Neel Chauhan <neel@neelc.org> (maintainer) Reviewed by: osa (mentor) Approved by: osa (mentor) Differential Revision: https://reviews.freebsd.org/D27689b75fef6475
mail/fetchmail: mail/fetchmailconf: Update to 6.4.13 [1], fix rcfile bug [2]
Update mail/fetchmail{,conf} to 6.4.13 and fix rc script to work correctly
when root's shell does not include /usr/local/bin in $PATH.
mail/fetchmail passes 'poudriere testport' on both i386 and amd64 under
11.4 and 12.1 for the following configurations:
- Default settings
- Default settings, build as non-root
- ssl=base, GSSAPI_MIT
- ssl=base, GSSAPI_NONE
- ssl=openssl
- ssl=openssl with SSL2 and SSL3 disabled
- ssl=openssl, GSSAPI_NONE
- ssl=libressl
- ssl=libressl, GSSAPI_NONE
mail/fetchmailconf passes 'poudriere testport' on both i386 and amd64 under
11.4 and 12.1 with default settings
Additionally, passes bulk -tC on 12.1-arm64.
PR: 250925 [1]
Submitted by: Corey Halpin (maintainer)
PR: 250691 [2, comments #14, #15]
Reported by: Brian Biskeborn [2], Andrey Kiryanov [2]c141f24e91mail/fetchmail: Fix shell's 'Bad -c option' in rcscript. Turns out that our fetchmail_dump_config() function needs to add one more level of quoting because it's being unquoted and word split twice, once by su's shell, and again by sh. While here, change sh to /bin/sh to make the intention clearer. Bump PORTREVISION to get the fix out onto the systems. PR: 250691 Reported by: Helmut Ritter <freebsd-ports@charlieroot.de> Approved by: chalpin@cs.wisc.edu MFH: 2020Q4 (blanket, one-line tested working fix, 4-eyes principle)b03fc003c7
mail/fetchmail: fix rcscript regression from _1 that broke global mode In a situation where fetchmail is to be started globally with the configuration in $LOCALBASE/etc, the rc.d file would try to run fetchmail for the wrong user. Simplify script more, avoiding recursive call in single-user mode. Submitted by: Corey Halpin (maintainer, direct mail to mandree@) Reported by: Armin Tüting69c372bb8c
mail/fetchmail: avoid rc.conf overriding daemon interval, many other fixes
Authors: CH = Corey Halpin, MA = Matthias Andree
- fetchmail's rc script now queries the daemon interval from the
configuration, and falls back to the rc.conf value if given. [CH]
- Similarly, the logging facility will be taken from the configuration [MA]
- Add documentation to the rcfile's header comments. [MA]
- Drop support for fetchmail_home_prefix in rc.conf, and query the
respective users' home directories with getent instead. [MA]
- In the rc scripts, redirect input from /dev/null so it will not ask
for passwords. [MA]
- Add support for the typical 12.1 rc.conf ${name}_... keywords. [MA]
- Make script execution easier to follow by simplifying if...else logic. [CH]
- Fix rcscript's exit code to be 1 if one of the per-user calls fails. [CH]
- Add relevant notes to UPDATING. [MA]
PR: 249860
Submitted by: Corey Halpin (maintainer)
Reported by: Chris James (on fetchmail-users mailing list)
Approved by: Corey Halpin (maintainer)a53a4d6751mail/fetchmail: update to 6.4.12 (regression fixes) Fixes these regressions: - Misleading false complaints that TLSv1.3 support were missing from the system but still auto-negotiating it (broken in 6.4.9, fixed in 6.4.11). - README contained NEWS fragments (broken since c. 1 year/c. 6.4.2, fixed in 6.4.12) instead of the actual contents. (This was also the reason to skip 6.4.11). For the potential MFH 6.4.8 -> 6.4.12, 6.4.9 also adds to the manual page which has is used for fingerprints, MD5, and adds a Romanian-language translation by Florentina Musat. PR: 249009 Approved by: Corey Halpin (maintainer) MFH: 2020Q3 (manpage, README fixes, added translation)3db218bad2
mail/fetchmail: update to 6.4.10 while here, switch distfile back to xz format and update the > 2^31 "long long" fix so it patches the right place of the NEWS file. - adds Romanian translation - minor manual page fix to add "MD5" hash to sslfingerprint documentation PR: 248954 Approved by: Corey Halpin (maintainer)1f4ac50a50
mail/fetchmail: update to 6.4.8, adds Serbian translation, ... and updates a few other translations: Czech, French, Japanese, Polish, Albanian, Swedish, Chinese/simplified, Esperanto. PR: 247261 Approved by: chalpin@cs.wisc.edu (Corey Halpin, maintainer) MFH: 2020Q2 (translation updates)9833a8dba6
mail/fetchmail: update to 6.4.4 (updates Japanese translation and version) No code changes. PR: 245927 Approved by: chalpin@cs.wisc.edu (Corey Halpin, maintainer) MFH: 2020Q2 (only translation update for ja (Japanese))381c2fa5ff
mail/fetchmail, fetchmailconf: update from -rc2 to release (translations) Update from fetchmail-6.4.3-rc2 to fetchmail-6.4.3, with these relevant changes. None affect code files, it's only translations and documentation. * 02c92e99 2020-04-05 | po/: Record 'make distcheck' changes for release. (tag: RELEASE_6-4-3) [Matthias Andree] * 0b175aec 2020-04-05 | configure.ac, NEWS: Bump version for 6.4.3 release. [Matthias Andree] * 0b143cf8 2020-04-04 | NEWS: Mention Esperanto update. [Matthias Andree] * 54577a4d 2020-04-03 | Update <eo> Esperanto translation to fetchmail 6.4.3-rc2 [Felipe Castro] * cd34cf8f 2020-04-02 | NEWS: Add translations so far. [Matthias Andree] * 5ed4bb4c 2020-04-01 | Update <sv> Swedish translation to fetchmail 6.4.3-rc2 [Göran Uddeborg] * 117ecd06 2020-03-31 | Update <zh_CN> Chinese (simplified) translation to fetchmail 6.4.3-rc2 [Boyuan Yang] * 13600873 2020-03-31 | Update <sq> Albanian translation to fetchmail-6.4.3-rc2 [Besnik Bleta] * c83a5ae9 2020-03-31 | Update <pl> Polish translation to fetchmail 6.4.3-rc2 [Jakub Bogusz] * 741ae779 2020-04-01 | Update <fr> French translation to fetchmail-6.4.3-rc2 [Frédéric Marchal] * 744af877 2020-03-31 | Update <cs> Czech translation to fetchmail 6.4.3-rc2 [Petr Pisar] There is no documentation/translation-update blanket. PR: 245371 Approved by: Corey Halpin (maintainer) MFH: 2020Q2 (only documentation and translation updates, please approve)abe77bfa0c
mail/fetchmail, fetchmailconf: update to 6.4.3-rc2 (bug fixes) Add a patch to document --sslproto tls1.3+ and tls1.3 through the manpage, which hasn't made 6.4.3-rc2 but works since 6.4.0 assuming that the SSL library supports TLSv1.3. Remove fetchmailconf patch that is now part of the upstream code. Switch to .lz downloads, a tiny bit smaller. Upstream changelog: ## BUGFIXES: * Plug memory leaks when parts of the configuration (defaults, rcfile, command line) override one another. * fetchmail terminated the placeholder command string too late and included garbage from the heap at the end of the string. Workaround: don't use place- holders %h or %p in the --plugin string. Bug added in 6.4.0 when merging Gitlab merge request !5 in order to fix an input buffer overrun. Faulty commit 418cda65f752e367fa663fd13884a45fcbc39ddd. Reported by Stefan Thurner, Gitlab issue #16. * Fetchmail now checks for errors when trying to read the .idfile, Gitlab issue #3. ## CHANGES: * Fetchmail documentation was updated to require OpenSSL 1.1.1. OpenSSL 1.0.2 reached End Of Life status at the end of the year 2019. Fetchmail will tolerate, but warn about, 1.0.2 for now on the assumption that distributors backport security fixes as the need arises. Fetchmail will also warn if another SSL library that is API-compatible with OpenSSL lacks TLS v1.3 support. * If the trust anchor is missing, fetchmail refers the user to README.SSL. PR: 245187 Submitted by: mandree@ Approved by: Corey Halpin (maintainer)7b8456ed12
Fix the build with the latest krb5 port PR: 244228 Submitted by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)befd7bcc6c
mail/fetchmail: mail/fetchmailconf: update to 6.4.2, make Python 3 compatible Fetchmail updated to new revision 6.4.2 - one bugfix - manual page updates - update of Chinese (simplified) translation - massive fetchmailconf overhaul + Python 3 compatible (requires py-future) + Supports IPv6 and SSL probing - remove two patches for fetchmail that are in the upstream release - add a smoke test to fetchmailconf's post-install, and a patch to support that running without X11 $DISPLAY. PR: 244130 Submitted by: mandree@ Reviewed by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer) Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer) MFH: 2020Q1 (bugfixes and fetchmailconf update and Python3 compat.)62f20915eb
Unbreak fetch of fetchmailconf... ...which inherits MASTER_SITES through .including fetchmail/Makefile5438810ac7
mail/fetchmail: update for new caroot infrastructure in base PR: 243613 Submitted by: Helge Oldach <freebsd@oldach.net> Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)32e15489c3
mail/fetchmail: cat(1) test-suite.log from build This is to assist with build error diagnosis, after PRs 240914 and 241032. Submitted by: mandree@ Approved by: Corey Halpin (maintainer) (obtained by e-mail outside Bugzilla)a697aa2467
fetchmail: Fix manpage rendering w/ groff, fix t.smoke failure PR: 240914 PR: 241032 Submitted by: Corey Halpin (maintainer) Reported by: Helge Oldach, Konstantin Belousov82ea4cbc55
Drop the ipv6 virtual category for m* category as it is not relevant anymore0be2ce42f1
Limit USES+=compiler:c11 to powerpc* and FreeBSD < 13. MIPS regressed in r513614 because it does not have a C11 compiler. Fetchmail 6.4.1 is C89 code, one patch we provide makes it C99 (it requires the long long int type). The base compiler on powerpc 11/12 does not yield an executable, but MIPS on the other hand does not offer a C11 compiler, so for now, revert anything but powerpc before FreeBSD 13 to use its base compiler. FreeBSD 13 is exempt and also uses the base compiler, because the ARCH guys intend to merge LLVM 9 soon. PR: 241031 Reviewed by: pkubaj@ Approved by: blanket (fix recent regression from r513614)5248b5aaa3
mail/fetchmail: fix build on GCC architectures Base GCC miscompiles binaries, one test fails: FAIL: t.smoke SKIP: t.validate-xhtml10 SKIP: t.validate-xhtml PASS: t.x509_name_match ============================================================================ Testsuite summary for fetchmail 6.4.1 ============================================================================ # TOTAL: 4 # PASS: 1 # SKIP: 2 # XFAIL: 0 # FAIL: 1 # XPASS: 0 # ERROR: 0 Approved by: mentors (implicit approval)573da79dd7
Remove mail/fetchmail64, use mail/fetchmail instead. fixes up incomplete r513169, and follows PR: 24090857cd12fda9
mail/fetchmail: update to 6.4.1. Release notes: https://sourceforge.net/projects/fetchmail/files/branch_6.4/ While here, remove fetchmail64 port, now no longer needed. PR: 240908 Submitted by: chalpin@cs.wisc.edu (maintainer)1ecd682659
mail/fetchmail64 update to regression-fixed 6.4.1.5d0b485bb5
Chase MASTER_SITES directory rename. Approved by: portmgr (blanket)d58f89ff4f
Upgrade to fetchmail 6.4.0 release. Over rc4, this contains one bugfix to permit FETCHMAILHOME to be a relative path in daemon mode.64ca7ca2a4
mail/fetchmail64: update to release candidate #4.6c87efd371
mail/fetchmail64: Update to -rc3 with a few fixes that are to appear in 6.4.0, ... and one patch (2 GibiB mailbox size reporting) that won't make 6.4.8076f6b3d0
Resolve conflicts and fix portlint warnings around USES= placement.844707a445
Add new port to mail/ to package fetchmail 6.4 release candidate.599a611c10
onvert to UCL & cleanup pkg-message (categories l-m)558224994b
Fixup minor oversights from r490780 mail/fetchmail* * Update comment in mail/fetchmail/files/fetchmailrc.sample * Remove mail/fetchmail/files/fetchmail.in that got copied to mail/fetchmailconf/files/69c071117a
mail/fetchmail depends overhaul, new fetchmailconf port * Bring back SNI (server name indication) support for TLS connections, lost in 6.3.26_10 (PORTREVISION=10) as a regression over _9. Pointy hat: mandree@ * Drop the X11 option, remove the Python dependency, and create a new mail/fetchmailconf slave port/package that installs the fetchmailconf configurator. Note that the _DEPENDS of the ports reflects a technical dependence (fetchmailconf needs fetchmail), and we cannot keep an X11 option that depends on fetchmailconf, since that would create a circular dependency, which we must avoid. * Patch configure instead of configure.ac with Cy's Kerberos fix, drop autoreconf from USES, and add a new configure check directly to set HAVE_DECL_SSLV3_CLIENT_METHOD to cover the various TLS providers (currently five, base, openssl, openssl111, libressl, libressl-devel) * Add -Wl,--as-needed to LDFLAGS so as not to pull in unneeded .so libraries, for instance, libcom_err when compiling under GSSAPI_NONE. * Bump PORTREVISION. Very fruitful and nice collaboration with and Approved by: chalpin@cs.wisc.edu (maintainer)f7cd8bfb78
Fix GSSAPI-based, and NLS-less, builds. This was also tested on a live 12.0 amd64 machine, 11.2-arm64 and 11.2-i386 poudriere boxes with base GSSAPI. PR: 234740 Reported by: Peter Putzer (Bugzilla), Alex V. Petrov (e-mail) Approved by: Corey Halpin (maintainer)56147f1c5d
mail/fetchmail: backport less-old TLS support from Fedora Allows options like 'sslproto "TLS1.2+"', for example. PR: 233247 Submitted by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer) Approved by: koobsd4148ae4d2
mail/fetchmail: backport SNI support from upstream This affects some servers such as Gmail. See also bugs on Linux distributions. * https://bugzilla.redhat.com/show_bug.cgi?id=1611815 * https://bugs.launchpad.net/ubuntu/+source/fetchmail/+bug/1798786 PR: 233078 Submitted by: fuyuhiko.maruyama@gmail.com Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer), mentors (implicit) Obtained from: https://gitlab.com/fetchmail/fetchmail/commit/9b8b634312f169fab872f3580c2febe5af031615 MFH: 2018Q4390129ae6b
mail/fetchmail: - Ensure the fetchmail script returns 1 if fetchmail is not running. - Bump PORTREVISION. PR: ports/21905156b6a5eafc
Add PY_FLAVOR to Python module dependencies. Sponsored by: Absolight8dcaabcd6e
Fix build with openssl-devel, remove BROKEN_SSL. Approved by: (blanket approval for unbreaking builds)9c9c191d6e
Correctly link to MIT KRB5 libraries when selected. This was discovered while working through issues relating to an exp-run using base with private Heimdal, part of the project to make a) Heimdal in base private and b) import MIT into base (PR 222745). PR: 227680 Submitted by: cy@ Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer) MFH: 2018Q277630214c4
Use BROKEN_SSL Approved by: portmgr (blanket)d6ce2929ef
- Fix depends: always require python since fetchmailconf.py is always installed Approved by: portmgr blankete868ce4730
Remove all USE_OPENSSL occurrences. Sponsored by: Absolighta28f0f7f7f
Do not use post-stage. Use post-install instead. The only reason to use post-stage is because the port needs to do "things" at a later time, like some plist manipulation. While there, fold post-install in do-install targets when they are defined. PR: 214780 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight8b4093cba5
Mark some ports as not openssl-devel ready. Sponsored by: Absolight703ff6d361
Fix pkg-plist when X11 option is on. PR: 210757 Submitted by: Ting-Wei Lan <lantw44@gmail.com> Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)5c1bdd2acf