CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

mail/fetchmail 6.6.9

Batch mail retrieval utility for IMAP/POP3/ETRN/ODMR

Port info

Maintainer
chalpin@cs.wisc.edu
Packages
latest: 6.6.9
Upstream
up to date
Last update
to 6.6.9 · 14d62b999b
Quarterly
2026Q4: 6.6.9 · last MFH 48ef898280
Formerly
mail/fetchmail64 until 2019-09-28
WWW
https://www.fetchmail.info/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install fetchmail
installs 6.6.9 from latest; from quarterly (2026Q4) 6.6.9
Port
# cd /usr/ports/mail/fetchmail && make install clean
# make -C /usr/ports/mail/fetchmail config  # change options first
Size
544 KiB download · 2.2 MiB installed
Depends on
devel/gettext-runtime 1.0_1
License
GPLv2+
Creates
user fetchmail, group fetchmail
Options
5 of 10 on in the package: DOCS GSSAPI_BASE NLS OPENSSL RPA
Show the 5 options that are off
GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OPIE WOLFSSL
pkg-message
Shown after installing
For pointers how to configure fetchmail in daemon mode
please consult /usr/local/etc/rc.d/fetchmail.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 166.6.96.6.9–
FreeBSD 156.6.96.6.9–
FreeBSD 146.6.96.6.96.6.9

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 156.6.96.6.9–
FreeBSD 146.6.96.6.96.6.9

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 6.6.9.

Fixed (23)

Show 23 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (376)

Martin Wilke (miwi) · 6.3.9
- Pass maintainership to submitter

PR:		134189
Submitted by:	Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
9cf1cf3916
Mark Linimon (linimon) · 6.3.9
Reset barner@FreeBSD.org due to several months of inactivity.

Hat:		portmgr
a325795c3a
Mark Linimon (linimon) · 6.3.9
Add http://homepages.uni-paderborn.de to MASTER_SITES.  The sunsite mirrors appear to be behind.  Also (temporarily?) remove home.leo.org, as the site seems to have been rearranged.

PR:		ports/130301
Submitted by:	Matthias Andree <matthias dot andree at gmx dot de>
Hat:		portmgr
c9f4fe8d04
Pav Lucistnik (pav) · 6.3.9
- Update to 6.3.9

PR:		ports/129755
Submitted by:	Matthias Andree <matthias.andree@gmx.de>
Approved by:	maintainer timeout (barner; 20 days)
9a45bddce5
Rong-En Fan (rafan) · 6.3.8_7
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
741aa71483
Simon Barner (barner) · 6.3.8_7
- Use revised patch for CVE-2008-2711 - Bump port revision

Security:	http://fetchmail.berlios.de/fetchmail-SA-2008-01.txt
Security:	http://www.vuxml.org/freebsd/1e8e63c0-478a-11dd-a88d-000ea69a5213.html
a227f4d511
Simon Barner (barner) · 6.3.8_6
- Security fix: potential crash in -v -v verbose mode. - Bump port revision

PR:		ports/124718
Submitted by:	Matthias Andree <matthias.andree@gmx.de>
Security:	http://www.vuxml.org/freebsd/168190df-3e9a-11dd-87bc-000ea69a5213.html
Security:	CVE-2008-2711
e71d8331aa
Edwin Groothuis (edwin) · 6.3.8_5
Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)
090059a210
Simon Barner (barner) · 6.3.8_4
- Fix installation as non-root user

Submitted by:	Stefan Sperling
PR:		ports/122269
ea8075abbd
Edwin Groothuis (edwin) · 6.3.8_4
Remove always-false/true conditions based on OSVERSION 500000
81cd10f8d2
Simon Barner (barner) · 6.3.8_4
- Fix for CVE-2007-4565 [1] - Manually include bsd.python.mk if WITH_X11 is set (after bsd.port.pre.mk) [2]

Security:	http://www.vuxml.org/freebsd/45500f74-5947-11dc-87c1-000e2e5785ad.html
Security:	http://fetchmail.berlios.de/fetchmail-SA-2007-02.txt
Submitted by:	Matthias Andree <matthias.andree@gmx.de> [1]
PR:		ports/116011 [1]
Submitted by:	Jacula Modyun <jacula@gmail.com> [2]
PR:		ports/115714 [2]
3017d8ada2
Simon Barner (barner) · 6.3.8_3
- security/ca-roots is deprecated, switch to security/ca_roots_nss for   SSL certificates.
c375630850
Rong-En Fan (rafan) · 6.3.8_3
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script   supports them.  This is determined by running ``configure --help'' in   do-configure target and set the shell variable _LATE_CONFIGURE_ARGS   which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable   Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - 

PR:		ports/111470
Approved by:	portmgr
Discussed with:	stas (Mk/*), gerald (info related stuffs)
Tested by:	pointyhat exp run
f935a609c5
Simon Barner (barner) · 6.3.8_3
- Actually respect the `fetchmail_user' variable in single daemon   mode - Document that above variable is ignored in the per-user daemon mode - Bump port revision

Requested by:	Graham Menhennitt <graham@menhennitt.com.au>
PR:		ports/114701
ccb2a8b340
Simon Barner (barner) · 6.3.8_2
- Remove circular dependency in rcorder by removing the (unnessary) constraint   that fetchmail is started "BEFORE LOGIN". "REQUIRE mail" (which in turn   requires LOGIN) is enough. - Bump PORTREVISION

PR:		ports/114294
Submitted by:	Alson van der Meulen <alson@flutnet.org>
c119f2af3c
Simon Barner (barner) · 6.3.8_1
Install fetchmailrc with 640 since it may contain passwords. The fetchmailrc.sample file is still installed 644.
7da518ccdd
Simon Barner (barner) · 6.3.8_1
- Add pkg-message pointing to documenation in rc script. - Add pointers to fetchmail documentation to rc script.
7a833eebc9
Florent Thoumie (flz) · 6.3.8_1
- Welcome X.org 7.2 \o/. - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}.
d4f0d0048a
Simon Barner (barner) · 6.3.8
- Make fetchable - Remove home.pages.de master site - Add sunsite mirror

PR:		ports/111443
Submitted by:	Matthias Andree
12a78b2f2a
Rong-En Fan (rafan) · 6.3.8
- Fix fetch, MASTER_SITE_BERLIOS already contains %SUBDIR%
04820b18ff
Simon Barner (barner) · 6.3.8
- Update to 6.3.8 - Fix insecure APOP authentication (minor)

Security: http://fetchmail.berlios.de/fetchmail-SA-2007-01.txt
Security: http://www.vuxml.org/freebsd/f1c4d133-e6d3-11db-99ea-0060084a00e5.html
ChangeLog: https://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=12610
f7c5c4e2a3
Simon Barner (barner) · 6.3.7
- Update to 6.3.7 - Regression fixes for KPOP and repoll after server disconnect (TLS)   Details: https://lists.berlios.de/pipermail/fetchmail-announce/2007-February/000047.html
8f15fe580d
Simon Barner (barner) · 6.3.6
- Update to 6.3.6 - Fixes two security issues, one of which is a longstanding password disclosure bug. - Several robustness fixes and other improvements

Release notes:	https://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=11977
Security:	http://www.vuxml.org/freebsd/5238ac45-9d8c-11db-858b-0060084a00e5.html
Security:	http://www.vuxml.org/freebsd/37e30313-9d8c-11db-858b-0060084a00e5.html
Reported by:	Matthias Andree (upstream author)
6f120f8e03
Simon Barner (barner) · 6.3.5
- Update to fetchmail 6.3.5. See here for the release notes:   http://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=11358 - OPTIONize [1] - GSSAPI support (requires Kerberos). [1] - Removed POP2 from port's default configuration [1]

Requested by:	Stefan Thurner <thurners@nicsys.de> [1]
b0ecc0f5bc
Simon Barner (barner) · 6.3.4_3
- Add new rc.conf option "fetchmail_logging_facility" which can be used   to specify where fetchmail logs to. Default: --syslog (as hardcoded   before). [1] - Use marco for cp [2] - Try to remove directories not listed in mtree [2] - No portrevision bump since the default behaviour remains the same, and   a new fetchmail version is to be exspected soon anyway.

Requested by:	Gerard Seibert <gerard@seibercom.net> [1]
Submitted by:	Stanislav Sedov <ssedov@mbsd.msk.ru> [2]
PR:		ports/101517
14e22ed87e
Simon Barner (barner) · 6.3.4_3
Make prefix clean.

PR:			ports/97977
Submitted by:		Esa Karkkainen <ejk@iki.fi>
Big shiny pointy hat:	me
df85b83a62
Simon Barner (barner) · 6.3.4_2
- Use %%RC_SUBR%% [1] - Fix typo in Makefile [1] - Fix recursive calls of rc script on older systems (requested in [2]) - Bump PORTREVISION

PR:			97876 [1], 97335 [2]
Submitted by:		Jeremy Chadwick <freebsd@jdc.parodius.com> [1],
			Veselin Slavov <vess@slavof.net> [2]
2e39d08eeb
Simon Barner (barner) · 6.3.4_1
- Fix PID file for system-wide daemon mode - Fix package: Create /var/run/fetchmail in pkg-install instead of   post-install target. - Bump PORTREVISION

PR:		ports/97283
Submitted by:	Martin Jackson <mhjacks@swbell.net>
125dd5c19c
Simon Barner (barner) · 6.3.4
- Update to 6.3.4 [1] - Add rcNG script. See $PREFIX/etc/rc.d/fetchmail for   instructions. Inspired by [2] and ports/www/apache22.

PR:		ports/96987 [1], ports/96079
Submitted by:	Rob MacGregor <freebsd.macgregor@blueyonder.co.uk> [1],
		Martin Jackson <mhjacks@swbell.net>
f9884d1c0e
Edwin Groothuis (edwin) · 6.3.2_1
Remove USE_REINPLACE from ports starting with M
efe7d5f7f4
Simon Barner (barner) · 6.3.2_1
- Prevent fetchmail from crashing if the .netrc file does not contain   a password for a particular account.

- Bump PORTREVISION

Submitted by:	Craig Leres via Matthias Andree
3cd0edaa2b
Simon Barner (barner) · 6.3.2
- Update to 6.3.2 - Changes:   * Fixes a denial of service bug/fetchmail crash after sending a bounce   * Adds a Maillennium (Comcast) workaround   * ChangeLog: https://lists.berlios.de/pipermail/fetchmail-announce/2006-January/000022.html Security:	http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt Security:	CVE-2006-0321 Security:	http://www.vuxml.org/freebsd/f11d3b22-88c6-11da-a7b2-0060084a00
bf66bc15d1
Simon Barner (barner) · 6.3.1
Update to 6.3.1

* Fix null pointer dereference w/ headerless message in
   multi-drop mode [1]
 * Removed patches are in the upstream distribution now
 * ChangeLog: https://lists.berlios.de/pipermail/fetchmail-announce/2005-December/000017.html

Security: http://www.vuxml.org/freebsd/f7eb0b23-7099-11da-a15c-0060084a00e5.html
Security: http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt
Security: CVE-2005-4348
49b949d3f9
Simon Barner (barner) · 6.3.0_3
- Fix a null pointer dereference in multi-drop mode [1] - Fix packaging if python is not present at compile time [2] - Sort targets in Makefile - Fix variable in the WITH_X11 case - Bump PORTREVISION (for [1])

Submitted by:	Andreas Haakh <bugReporter@Haakh.de> [1]
Reviewed by:	Matthias Andree <matthias.andree@gmx.de>
                (upstream maintainer) [1]
Reported by:	pointyhat via kris [2]
1583170408
Simon Barner (barner) · 6.3.0_2
- Add RUN_DEPENDS on security/ca-roots, so the certificate check really   succeeds (if the servers certificate is signed by one of those authorites)

- Bump PORTREVISON, since a failing certiciate check spams the port users'
  maillog.
a6b600d08c
Simon Barner (barner) · 6.3.0_1
- Use USE_OPENSSL [1] - Remove obsolete --enable-inet6 configure argument [1] - Don't try to enable Kerberos IV and V at the same time [1] - Add WITH_NTLM knob. Inform port user about other knobs   (WITH_X11, WITHOUT_NLS) [1] - Correct man page patch [1] - Fix default OpenSSL certificate path [1] [2] - Fix plist [1] [3] - Bump PORTREVISON

Submitted by:	Matthias Andree <matthias.andree@gmx.de> [1]
Reported by:	Dieter Rauschenberger <dr@d-ra.de> [2]
PR:		ports/90084 [2]
Reported by:	kris via pointyhat [3]
d55a49e9d5
Simon Barner (barner) · 6.3.0
- Update to fetchmail 6.3.0 - From the announcement:

fetchmail 6.3.0 has been released on 2005-11-30. More than two years
  after the previous formal 6.2.5 release, this collects several dozen
  bug fixes, documentation, portability and IPv6 improvements and marks
  the beginning of a new "stable" 6.3.X branch that will not change,
  except for bug fixes and documentation updates.

- files/patch-pop2.c contributed by Stanislav Brabec <sbrabec@suse.cz>
  via Matthias Andree <matthias.andree@gmx.de> (upstream maintainer)
e92788bd72
Simon Barner (barner) · 6.2.5.2_4
Add SHA256 for my ports (that don't already have it).
f50a6c5196
Simon Barner (barner) · 6.2.5.2_4
- Fix a bug introduced with fetchmail-6.2.5.2_3, where it would sometimes   leave some messages on an IMAP server, i.e. this is the correct fix   for the following bug (as described Makefile:1.161 and   files/patch-imap.c:1.1):

fix IMAP client timeout bug with upstream servers that do not send updated
  EXISTS counts after acknowledging EXPUNGE see <http://bugs.debian.org/314509>

- Bump PORTREVISION to 4

PR:			ports/88850
Submitted by:		Vasil Dimov
Patch provided by:	Matthias Andree (upstream maintainer)
Patch tested by:	barner, Vasil Dimov
2025cb1d96
Simon Barner (barner) · 6.2.5.2_3
Add private backup master site.

Requested by:	Diane Bruce <db@db.net>
PR:		ports/88787
64a4c95d67
Simon Barner (barner) · 6.2.5.2_3
- fix IMAP client timeout bug with upstream servers that do not send updated   EXISTS counts after acknowledging EXPUNGE see <http://bugs.debian.org/314509>

- add fetchmailconf wrapper check for _tkinter.so (if python was installed but
  not Tkinter, the wrapper would still try to run fetchmailconf.bin, which
  gives a less clear error message to the user than was intended)

- let fetchmailconf wrapper pass command line arguments to fetchmailconf.bin
  (it supports -d and -f FILE)

- replace PREFIX with LOCALBASE where appropriate

- bump PORTREVISION

Submitted by:	Matthias Andree <matthias.andree@gmx.de>
PR:		ports/88444
265245fa11
Simon Barner (barner) · 6.2.5.2_1
Don't indent comment added in last commit by one tab, so it is not printed.
2ea4704e11
Simon Barner (barner) · 6.2.5.2_1
- Use fetchmailconf-1.43.2 in order to fix a password exposure caused by   insecure file creation.

- While here, move berlios.de to the top of the MASTERSITEs, since
  development takes place there.

- Bump PORTREVISION

Security:	CVE-2005-3088
Security:	http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt
3f6af8cdca
Simon Barner (barner) · 6.2.5.2
Fix Kerberos {IV, V} detection.
e2ceae20bb
Simon Barner (barner) · 6.2.5.2
Update WWW (new fetchmail homepage fetchmail.berlios.de).

PR:		ports/83900
Submitted by:	Matthias Andree <matthias.andree@gmx.de>
1566a7e9b4
Simon Barner (barner) · 6.2.5.2
- Update to 6.2.5.2. This fixes a denial of service vulerability introduced   in version 6.2.5.1

- Use distribution patch from fetchmail.berlios.de instead of keeping the
  security fix in CVS (-> remove patch-r1, patch-s1 which contained to
  update from 6.2.5 to 6.2.5.1).

- The above patch also contains a patch that we kept locally in
  patch-driver.c: This one has been removed, too.
5d0b10e19d
Simon Barner (barner) · 6.2.5.1
- Update to 6.2.5.1 (security update!) - Add new master site - Take maintainership (no objections on freebsd-ports,   Matthias also favours this option as long as the new FreeBSD   maintainer will be responsive and submit patches upstream - promissed :-)

Submitted by:	Matthias Andree <matthias DOT andree AT gmx DOT de>
PR:		ports/83805
Obtainted from:	http://download.berlios.de/fetchmail/fetchmail-patch-6.2.5.1.gz
Security:	http://www.vuxml.org/freebsd/3497d7be-2fef-45f4-8162-9063751b573a.html
8120543a2d
Mark Linimon (linimon) · 6.2.5_2
With portmgr hat on, reset eik's ports since he has been inactive for several months (not responding to email).

Discussed among:	portmgr team
adda42bec2
David E. O'Brien (obrien) · 6.2.5_2
At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.
c3d8037aeb
David E. O'Brien (obrien) · 6.2.5_2
Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
f2fc2d60ae