- Pass maintainership to submitter PR: 134189 Submitted by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)9cf1cf3916
Fetchmail -- NTLM potential remote code executionentered 2026-09-26
Batch mail retrieval utility for IMAP/POP3/ETRN/ODMR
# pkg install fetchmailinstalls 6.6.9 from latest; from quarterly (2026Q4) 6.6.9# cd /usr/ports/mail/fetchmail && make install clean# make -C /usr/ports/mail/fetchmail config # change options first
fetchmail, group fetchmailFor pointers how to configure fetchmail in daemon mode please consult /usr/local/etc/rc.d/fetchmail.
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 6.6.9 | 6.6.9 | – |
| FreeBSD 15 | 6.6.9 | 6.6.9 | – |
| FreeBSD 14 | 6.6.9 | 6.6.9 | 6.6.9 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 6.6.9 | 6.6.9 | – |
| FreeBSD 14 | 6.6.9 | 6.6.9 | 6.6.9 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 6.6.9.no CVE referenced
no CVE referenced
- Pass maintainership to submitter PR: 134189 Submitted by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)9cf1cf3916
Reset barner@FreeBSD.org due to several months of inactivity. Hat: portmgra325795c3a
Add http://homepages.uni-paderborn.de to MASTER_SITES. The sunsite mirrors appear to be behind. Also (temporarily?) remove home.leo.org, as the site seems to have been rearranged. PR: ports/130301 Submitted by: Matthias Andree <matthias dot andree at gmx dot de> Hat: portmgrc9f4fe8d04
- Update to 6.3.9 PR: ports/129755 Submitted by: Matthias Andree <matthias.andree@gmx.de> Approved by: maintainer timeout (barner; 20 days)9a45bddce5
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
- Remove CONFIGURE_TARGET hack in various bsd.*.mk
- USE_GNOME=gnometarget is now an no-op
Changes to individual ports, other than removing the CONFIGURE_TARGET hack:
= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
- comms/gnuradio
- science/abinit
- science/elmer-fem
- science/elmer-matc
- science/elmer-meshgen2d
- science/elmerfront
- science/elmerpost
= use x86_64 as ARCH
- devel/g-wrap
= other changes
- print/magicfilter
GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf
Total # of ports modified: 1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)
PR: 126524 (obsoletes 52917)
Submitted by: rafan
Tested on: two pointyhat 7-amd64 exp runs (by pav)
Approved by: portmgr (pav)741aa71483- Use revised patch for CVE-2008-2711 - Bump port revision Security: http://fetchmail.berlios.de/fetchmail-SA-2008-01.txt Security: http://www.vuxml.org/freebsd/1e8e63c0-478a-11dd-a88d-000ea69a5213.htmla227f4d511
- Security fix: potential crash in -v -v verbose mode. - Bump port revision PR: ports/124718 Submitted by: Matthias Andree <matthias.andree@gmx.de> Security: http://www.vuxml.org/freebsd/168190df-3e9a-11dd-87bc-000ea69a5213.html Security: CVE-2008-2711e71d8331aa
Bump portrevision due to upgrade of devel/gettext. The affected ports are the ones with gettext as a run-dependency according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT in Makefile (29 of them). PR: ports/124340 Submitted by: edwin@ Approved by: portmgr (pav)090059a210
- Fix installation as non-root user Submitted by: Stefan Sperling PR: ports/122269ea8075abbd
Remove always-false/true conditions based on OSVERSION 50000081cd10f8d2
- Fix for CVE-2007-4565 [1] - Manually include bsd.python.mk if WITH_X11 is set (after bsd.port.pre.mk) [2] Security: http://www.vuxml.org/freebsd/45500f74-5947-11dc-87c1-000e2e5785ad.html Security: http://fetchmail.berlios.de/fetchmail-SA-2007-02.txt Submitted by: Matthias Andree <matthias.andree@gmx.de> [1] PR: ports/116011 [1] Submitted by: Jacula Modyun <jacula@gmail.com> [2] PR: ports/115714 [2]3017d8ada2
- security/ca-roots is deprecated, switch to security/ca_roots_nss for SSL certificates.c375630850
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script supports them. This is determined by running ``configure --help'' in do-configure target and set the shell variable _LATE_CONFIGURE_ARGS which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - PR: ports/111470 Approved by: portmgr Discussed with: stas (Mk/*), gerald (info related stuffs) Tested by: pointyhat exp runf935a609c5
- Actually respect the `fetchmail_user' variable in single daemon mode - Document that above variable is ignored in the per-user daemon mode - Bump port revision Requested by: Graham Menhennitt <graham@menhennitt.com.au> PR: ports/114701ccb2a8b340
- Remove circular dependency in rcorder by removing the (unnessary) constraint that fetchmail is started "BEFORE LOGIN". "REQUIRE mail" (which in turn requires LOGIN) is enough. - Bump PORTREVISION PR: ports/114294 Submitted by: Alson van der Meulen <alson@flutnet.org>c119f2af3c
Install fetchmailrc with 640 since it may contain passwords. The fetchmailrc.sample file is still installed 644.7da518ccdd
- Add pkg-message pointing to documenation in rc script. - Add pointers to fetchmail documentation to rc script.7a833eebc9
- Welcome X.org 7.2 \o/. - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}.d4f0d0048a- Make fetchable - Remove home.pages.de master site - Add sunsite mirror PR: ports/111443 Submitted by: Matthias Andree12a78b2f2a
- Fix fetch, MASTER_SITE_BERLIOS already contains %SUBDIR%04820b18ff
- Update to 6.3.8 - Fix insecure APOP authentication (minor) Security: http://fetchmail.berlios.de/fetchmail-SA-2007-01.txt Security: http://www.vuxml.org/freebsd/f1c4d133-e6d3-11db-99ea-0060084a00e5.html ChangeLog: https://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=12610f7c5c4e2a3
- Update to 6.3.7 - Regression fixes for KPOP and repoll after server disconnect (TLS) Details: https://lists.berlios.de/pipermail/fetchmail-announce/2007-February/000047.html8f15fe580d
- Update to 6.3.6 - Fixes two security issues, one of which is a longstanding password disclosure bug. - Several robustness fixes and other improvements Release notes: https://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=11977 Security: http://www.vuxml.org/freebsd/5238ac45-9d8c-11db-858b-0060084a00e5.html Security: http://www.vuxml.org/freebsd/37e30313-9d8c-11db-858b-0060084a00e5.html Reported by: Matthias Andree (upstream author)6f120f8e03
- Update to fetchmail 6.3.5. See here for the release notes: http://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=11358 - OPTIONize [1] - GSSAPI support (requires Kerberos). [1] - Removed POP2 from port's default configuration [1] Requested by: Stefan Thurner <thurners@nicsys.de> [1]b0ecc0f5bc
- Add new rc.conf option "fetchmail_logging_facility" which can be used to specify where fetchmail logs to. Default: --syslog (as hardcoded before). [1] - Use marco for cp [2] - Try to remove directories not listed in mtree [2] - No portrevision bump since the default behaviour remains the same, and a new fetchmail version is to be exspected soon anyway. Requested by: Gerard Seibert <gerard@seibercom.net> [1] Submitted by: Stanislav Sedov <ssedov@mbsd.msk.ru> [2] PR: ports/10151714e22ed87e
Make prefix clean. PR: ports/97977 Submitted by: Esa Karkkainen <ejk@iki.fi> Big shiny pointy hat: medf85b83a62
- Use %%RC_SUBR%% [1] - Fix typo in Makefile [1] - Fix recursive calls of rc script on older systems (requested in [2]) - Bump PORTREVISION PR: 97876 [1], 97335 [2] Submitted by: Jeremy Chadwick <freebsd@jdc.parodius.com> [1], Veselin Slavov <vess@slavof.net> [2]2e39d08eeb
- Fix PID file for system-wide daemon mode - Fix package: Create /var/run/fetchmail in pkg-install instead of post-install target. - Bump PORTREVISION PR: ports/97283 Submitted by: Martin Jackson <mhjacks@swbell.net>125dd5c19c
- Update to 6.3.4 [1] - Add rcNG script. See $PREFIX/etc/rc.d/fetchmail for instructions. Inspired by [2] and ports/www/apache22. PR: ports/96987 [1], ports/96079 Submitted by: Rob MacGregor <freebsd.macgregor@blueyonder.co.uk> [1], Martin Jackson <mhjacks@swbell.net>f9884d1c0e
Remove USE_REINPLACE from ports starting with Mefe7d5f7f4
- Prevent fetchmail from crashing if the .netrc file does not contain a password for a particular account. - Bump PORTREVISION Submitted by: Craig Leres via Matthias Andree3cd0edaa2b
- Update to 6.3.2 - Changes: * Fixes a denial of service bug/fetchmail crash after sending a bounce * Adds a Maillennium (Comcast) workaround * ChangeLog: https://lists.berlios.de/pipermail/fetchmail-announce/2006-January/000022.html Security: http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt Security: CVE-2006-0321 Security: http://www.vuxml.org/freebsd/f11d3b22-88c6-11da-a7b2-0060084a00bf66bc15d1
Update to 6.3.1 * Fix null pointer dereference w/ headerless message in multi-drop mode [1] * Removed patches are in the upstream distribution now * ChangeLog: https://lists.berlios.de/pipermail/fetchmail-announce/2005-December/000017.html Security: http://www.vuxml.org/freebsd/f7eb0b23-7099-11da-a15c-0060084a00e5.html Security: http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt Security: CVE-2005-434849b949d3f9
- Fix a null pointer dereference in multi-drop mode [1] - Fix packaging if python is not present at compile time [2] - Sort targets in Makefile - Fix variable in the WITH_X11 case - Bump PORTREVISION (for [1])
Submitted by: Andreas Haakh <bugReporter@Haakh.de> [1]
Reviewed by: Matthias Andree <matthias.andree@gmx.de>
(upstream maintainer) [1]
Reported by: pointyhat via kris [2]1583170408- Add RUN_DEPENDS on security/ca-roots, so the certificate check really succeeds (if the servers certificate is signed by one of those authorites) - Bump PORTREVISON, since a failing certiciate check spams the port users' maillog.a6b600d08c
- Use USE_OPENSSL [1] - Remove obsolete --enable-inet6 configure argument [1] - Don't try to enable Kerberos IV and V at the same time [1] - Add WITH_NTLM knob. Inform port user about other knobs (WITH_X11, WITHOUT_NLS) [1] - Correct man page patch [1] - Fix default OpenSSL certificate path [1] [2] - Fix plist [1] [3] - Bump PORTREVISON Submitted by: Matthias Andree <matthias.andree@gmx.de> [1] Reported by: Dieter Rauschenberger <dr@d-ra.de> [2] PR: ports/90084 [2] Reported by: kris via pointyhat [3]d55a49e9d5
- Update to fetchmail 6.3.0 - From the announcement: fetchmail 6.3.0 has been released on 2005-11-30. More than two years after the previous formal 6.2.5 release, this collects several dozen bug fixes, documentation, portability and IPv6 improvements and marks the beginning of a new "stable" 6.3.X branch that will not change, except for bug fixes and documentation updates. - files/patch-pop2.c contributed by Stanislav Brabec <sbrabec@suse.cz> via Matthias Andree <matthias.andree@gmx.de> (upstream maintainer)e92788bd72
Add SHA256 for my ports (that don't already have it).f50a6c5196
- Fix a bug introduced with fetchmail-6.2.5.2_3, where it would sometimes leave some messages on an IMAP server, i.e. this is the correct fix for the following bug (as described Makefile:1.161 and files/patch-imap.c:1.1): fix IMAP client timeout bug with upstream servers that do not send updated EXISTS counts after acknowledging EXPUNGE see <http://bugs.debian.org/314509> - Bump PORTREVISION to 4 PR: ports/88850 Submitted by: Vasil Dimov Patch provided by: Matthias Andree (upstream maintainer) Patch tested by: barner, Vasil Dimov2025cb1d96
Add private backup master site. Requested by: Diane Bruce <db@db.net> PR: ports/8878764a4c95d67
- fix IMAP client timeout bug with upstream servers that do not send updated EXISTS counts after acknowledging EXPUNGE see <http://bugs.debian.org/314509> - add fetchmailconf wrapper check for _tkinter.so (if python was installed but not Tkinter, the wrapper would still try to run fetchmailconf.bin, which gives a less clear error message to the user than was intended) - let fetchmailconf wrapper pass command line arguments to fetchmailconf.bin (it supports -d and -f FILE) - replace PREFIX with LOCALBASE where appropriate - bump PORTREVISION Submitted by: Matthias Andree <matthias.andree@gmx.de> PR: ports/88444265245fa11
Don't indent comment added in last commit by one tab, so it is not printed.2ea4704e11
- Use fetchmailconf-1.43.2 in order to fix a password exposure caused by insecure file creation. - While here, move berlios.de to the top of the MASTERSITEs, since development takes place there. - Bump PORTREVISION Security: CVE-2005-3088 Security: http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt3f6af8cdca
Fix Kerberos {IV, V} detection.e2ceae20bbUpdate WWW (new fetchmail homepage fetchmail.berlios.de). PR: ports/83900 Submitted by: Matthias Andree <matthias.andree@gmx.de>1566a7e9b4
- Update to 6.2.5.2. This fixes a denial of service vulerability introduced in version 6.2.5.1 - Use distribution patch from fetchmail.berlios.de instead of keeping the security fix in CVS (-> remove patch-r1, patch-s1 which contained to update from 6.2.5 to 6.2.5.1). - The above patch also contains a patch that we kept locally in patch-driver.c: This one has been removed, too.5d0b10e19d
- Update to 6.2.5.1 (security update!) - Add new master site - Take maintainership (no objections on freebsd-ports, Matthias also favours this option as long as the new FreeBSD maintainer will be responsive and submit patches upstream - promissed :-) Submitted by: Matthias Andree <matthias DOT andree AT gmx DOT de> PR: ports/83805 Obtainted from: http://download.berlios.de/fetchmail/fetchmail-patch-6.2.5.1.gz Security: http://www.vuxml.org/freebsd/3497d7be-2fef-45f4-8162-9063751b573a.html8120543a2d
With portmgr hat on, reset eik's ports since he has been inactive for several months (not responding to email). Discussed among: portmgr teamadda42bec2
At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.c3d8037aeb
Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.f2fc2d60ae