CVE and update status of the FreeBSD ports tree3,310 unaddressed CVEs in 678 portsAll times are CET
Port details

mail/fetchmail 6.6.9

Batch mail retrieval utility for IMAP/POP3/ETRN/ODMR

Port info

Maintainer
chalpin@cs.wisc.edu
Packages
latest: 6.6.9
Upstream
up to date
Last update
to 6.6.9 · 14d62b999b
Quarterly
2026Q4: 6.6.9 · last MFH 48ef898280
Formerly
mail/fetchmail64 until 2019-09-28
WWW
https://www.fetchmail.info/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install fetchmail
installs 6.6.9 from latest; from quarterly (2026Q4) 6.6.9
Port
# cd /usr/ports/mail/fetchmail && make install clean
# make -C /usr/ports/mail/fetchmail config  # change options first
Size
544 KiB download · 2.2 MiB installed
Depends on
devel/gettext-runtime 1.0_1
License
GPLv2+
Creates
user fetchmail, group fetchmail
Options
5 of 10 on in the package: DOCS GSSAPI_BASE NLS OPENSSL RPA
Show the 5 options that are off
GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OPIE WOLFSSL
pkg-message
Shown after installing
For pointers how to configure fetchmail in daemon mode
please consult /usr/local/etc/rc.d/fetchmail.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 166.6.96.6.9–
FreeBSD 156.6.96.6.9–
FreeBSD 146.6.96.6.96.6.9

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 156.6.96.6.9–
FreeBSD 146.6.96.6.96.6.9

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 6.6.9.

Fixed (23)

Show 23 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (376)

Oliver Eikemeier (eik) · 6.2.5_2
- fix POP bug [1] - add WITHOUT_NLS [2]

Seems like 6.2.6 takes a while...

PR:		60262 [1], 62732 [2]
Submitted by:	Stuart Barkley <stuartb@4gh.net> [1]
		Katsura Matsumoto <katsura@cc.osaka-kyoiku.ac.jp> [1]
eaf6282337
Oliver Eikemeier (eik) · 6.2.5_1
SIZEify

Prompted by:	trevor
839e10da49
Joe Marcus Clarke (marcus) · 6.2.5_1
Add USE_GETTEXT and bump PORTREVISION.

Submitted by:	trevor
Tested by:	bento
186b8ba82f
Trevor Johnson (trevor) · 6.2.5
Now gettext 0.12.1 is gettext-old.
78da40aa98
Oliver Eikemeier (eik) · 6.2.5
Try some new fetchmail mirrors

Noticed by:	Bill Fenner's portsurvey
Approved by:	marcus (mentor)
89638808a8
Oliver Eikemeier (eik) · 6.2.5
switch my ports to my FreeBSD address

Approved by:	marcus (mentor)
d1b344e8cd
Sergei Kolobov (sergei) · 6.2.5
- Update to 6.2.5 (see http://catb.org/~esr/fetchmail/NEWS for details) - Use DOCSDIR macro in pkg-plist - Don't install yet another copy of GPL - Pass maintainership to Oliver Eikemeier

PR:		58283, 58341
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>,
		Esa Karkkainen <ejk@iki.fi>
Approved by:	Ville Eerola <ve@sci.fi> (previous maintainer),
		krion (implicit)
d6c5b07526
Mike Silbersack (silby) · 6.2.4_1
Update fetchmail port to 6.2.4
21047f9d9f
Joe Marcus Clarke (marcus) · 6.2.2_1
Bump the PORTREVISION for the ports directly affected by the gettext upgrade.

Prodded by:	kris
a3108b1e51
Joe Marcus Clarke (marcus) · 6.2.2
Chase the libintl.so shared lib version.
adccc29aad
Daichi GOTO (daichi) · 6.2.2
update mail/fetchmail: 6.2.0 --> 6.2.2

PR:		53280
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
e737a05c90
FUJISHIMA Satsuki (sf) · 6.2.0
track ESR's page.

www.tuxedo.org -> www.catb.org
33e610508d
Akinori MUSHA (knu) · 6.2.0
De-pkg-comment.
4d0a0dc1c6
Jacques Vidrine (nectar) · 6.2.0
Upgrade to 6.2.0, primarily to fix YET ANOTHER remotely exploitable vulnerability.  That's at least four, but who's counting? <URL:http://security.e-matters.de/advisories/052002.html>
07e1eff52b
Doug Barton (dougb) · 6.1.2
Update to 6.1.2, released 10/31. It's a very simple bugfix upgrade.

PR:		ports/44830
Submitted by:	Matthias Andree <matthias.andree@web.de>
4c1de58db8
Christian Weisgerber (naddy) · 6.1.1
This port update fixes the pkg-plist to include the new localizations so they are included in the package, and it contains many upstream bugfixes, installs the NEWS documentation file. These are the upstream fixes:

* OTP fix patches from Stanislav Brabec <utx@penguin.cz>
* fix patch for writing antispam capability correctly in conf.c.
* Fix patches for Debian bugs #162571, #156592.
* Correction to manpage re -b and qmail.
* Patch to disable use of STLS if auth passwd is specified.
* Fix specfile generation to handle SSL correctly.
* New Danish, Turkish, and Catalan translation files.
* Improved ODMR debug messages.
* IMAP efficiency hack; don't fetch sizes unless needed.
* Detect and rewrite invalid return paths beginning with @.
* Fix for subtle freeing bug that suppressed information in some bounce msgs.
* Newline fix patches for internationalization files.
* Fix reversed test guarding authentication-failure warnings.
* Fix POP3 breakage starting at 5.9.14.

PR:		44330
Submitted by:	Matthias Andree <matthias.andree@web.de>
f01e7de603
Ying-Chieh Liao (ijliao) · 6.1.0
dont remove locale/* dirs
3fb67b589d
Cy Schubert (cy) · 6.1.0
Update 5.9.13 --> 6.1.0. Fixes yet another buffer overflow (exploit) described at http://security.e-matters.de/advisories/032002.html.

Approved by:	nectar (using his security-officer hat)
		will (using his portmgr hat)
		As we are so close to last tagging, as suggested by
		portmgr, maintainer approval is forgone.
312ab9677d
Jacques Vidrine (nectar) · 5.9.13
Mark FORBIDDEN due to another buffer overflow. http://security.e-matters.de/advisories/032002.html

% cvs rlog ports/mail/fetchmail/Makefile | grep 'exploit' | wc
         3      28     203
169788a18e
Kevin Lo (kevlo) · 5.9.13
Update to version 5.9.13

PR: 41623
Submitted by:	 Esa Karkkainen <ejk@iki.fi>
1be12811d1
Ade Lovett (ade) · 5.9.11
Chase shlib rev of devel/gettext

Submitted by:	lots and lots
Pointy hat to:	ade
c8eaa93644
Cy Schubert (cy) · 5.9.11
Upgrade 5.9.6 --> 5.9.11 (fixing a remotely exploitable buffer overrun).

PR:		38328
Submitted by:	Dominic Marks <dominic_marks@btinternet.com>
Approved by:	kris for the Security Officer Team,
		will for the Port Manager Team, and
		MAINTAINER timeout
70aae4aa9b
Jacques Vidrine (nectar) · 5.9.6_1
Mark FORBIDDEN due to a remotely exploitable buffer overflow.

http://tuxedo.org/~esr/fetchmail/NEWS
http://rhn.redhat.com/errata/RHSA-2002-047.html
200fda1655
Ade Lovett (ade) · 5.9.6_1
gettext upgrade uber-patch (stage 3)

- switch devel/gettext (0.11.1) on, installing full package
- flip devel/gettext-old (0.10.35) to installing only static binaries
  with a "-old" suffix -- gettext-old will have its deorbit burn
  sequence initiated just after 4.6-RELEASE
- fix up ports for the new world order

Reviewed by:	portmgr
f18cbf2fa6
Ade Lovett (ade) · 5.9.6
Stage 1 of gettext update.

Move gettext (0.10.35) with gettext-old
Update gettext from gettext-devel (0.10.40)
Remove gettext-devel
Fix dependencies

Stage 2 will involve upgraded gettext to 0.11 and fixing issues
Stage 3 involves a de-orbit burn sequence for gettext-old

Reviewed by:	portmgr
9210b7cb07
Ying-Chieh Liao (ijliao) · 5.9.6
upgrade to 5.9.6

Approved by:	maintainer timeout
2fa9946c02
Mario Sergio Fujikawa Ferreira (lioux) · 5.8.17_1
Style police: WWW tags should either end in a file/script or TRAILING /; Fix the later case
72dab870f3
Peter Pentchev (roam) · 5.8.17_1
For the X11 case, when tkinter is needed, look for it the right way - by USE_PYTHON and PYTHON_VERSION instead of hardcoding a python2.0 path component. Bump PORTREVISION accordingly.

Apologies to Ville for committing this without maintainer approval,
but the ports freeze is so close, and this looks like a trivial
build fix..

PR:		30271
Submitted by:	John Merryweather Cooper <jmcoopr@webmail.bmi.net>
80d75a2a4e
Kris Kennaway (kris) · 5.8.17
Upgrade to 5.8.17 ("Another victory for Open Source!").  This fixes a remotely exploitable buffer overflow when connecting to a malicious server.
d01a627767
Ben Smithurst (ben) · 5.8.11
Update to 5.8.11, which supports now ODMR, so update pkg-{descr,comment} to mention ODMR to help "make search".

Approved by:	ve@sci.fi (maintainer)
2d5bcac2eb
Peter Pentchev (roam) · 5.8.6
Update to 5.8.6. Fix a problem with building Kerberos 4 (Kerberos 5 is still broken).

PR:		27941 (the Kerberos 4 build problem)
Submitted by:	Shawn Halpenny <malachai@iname.com>
Approved by:	maintainer
feedac49cd
Doug Barton (dougb) · 5.8.5
Update to 5.8.5, provided by the maintainer.

PR:		ports/27783
Submitted by:	Ville Eerola <ve@sci.fi>
d04b9f2673
Doug Barton (dougb) · 5.8.1
Update path to py-tkinter

PR:		27754
Submitted by:	Esa Karkkainen ejk@iki.fi
68af2586e7
Peter Pentchev (roam) · 5.8.1
Update to 5.8.1 with lots of bugfixes.  Remove the substitution of /usr/bin/true for autoconf and friends - the fetchmail build system does the right thing now.

Approved by:	maintainer
Apologies to:	sobomax for my harsher-than-needed complaints for his
		fast and to-the-point port fixes.
979c487646
Maxim Sobolev (sobomax) · 5.7.6
Unbroke on the systems with crypto from ssl port.
6fcd1686e6
Doug Barton (dougb) · 5.7.6
Commit the least objectionable of the possible fixes... maintainer, et al can argue about the rest later, let's get the thing fixed first. This is a combination of my fix and Peter Pentchev's.
89eb12f60c
Maxim Sobolev (sobomax) · 5.7.4
Try harder to prevent build process from unnecessarily invoking autoheader, autoconf, automake and aclocal.

Prompted by:	Raimar Lutsch <raimar@lutsch.de>
6c70d3fc1e
Maxim Sobolev (sobomax) · 5.7.4
Fix two breakages: - Prevent Makefile from trying to run 644 missing script when no autocrap   is installed; - add missed by the configure -lintl into LDFLAGS.

Replace perl with ${PERL} while I'm here.

Submitted by:	bento
6dab512385
Peter Pentchev (roam) · 5.7.4
Update to 5.7.4. Add USE_GMAKE - too many things in the autoconf build process depend on GNU make.

Approved by:	maintainer
f061afd9c2
Peter Pentchev (roam) · 5.7.2
Remove patches incorporated into the mainstream fetchmail distribution.

Approved by:	maintainer
5960b716f2
Peter Pentchev (roam) · 5.7.2
Update to 5.7.2, add NOPORTDOCS handling, fix --enable-opie misspelled as --enable-OPIE until now.

Approved by:	maintainer
5fd2d44265
Peter Pentchev (roam) · 5.6.8
Update to 5.6.8, which contains preauthentication fixes and enhancements.

Approved by:	maintainer
df3de98c5f
Peter Pentchev (roam) · 5.6.5
Chase the checksum - yes, the tarball was rerolled. A non-reachable exit() call was removed from the end of main(), and the version number information was updated in the .lsm file.

Noticed by:	Steve Watt, Mike Harding, Ville Eerola, probably others, too
bb32f78b6e
Peter Pentchev (roam) · 5.6.5
Update to 5.6.5.

Approved by:	maintainer
Weird look to:	Eric S. Raymonds (3 releases in 2 weeks?! Oh come ON!)
65d8850cd8
Peter Pentchev (roam) · 5.6.3
Update to 5.6.3, skipping the slightly buggy 5.6.2. Also, correct the help message in the fetchmailconf wrapper script - fetchmailconf depends on py-tkinter, not just Python.

Submitted by:	Jack Twilley <jmt@inktomi.com> - the fetchmailconf inaccuracy
Approved by:	maintainer
8191d1f8fb
Peter Pentchev (roam) · 5.6.1
Update to 5.6.1.

Approved by:	maintainer
b643fa2a65
Peter Pentchev (roam) · 5.6.0_1
Add WITH_NTLM toggle to optionally build support for NTLM authentication. Bump PORTREVISION to reflect functionality change.

PR:		23214
Submitted by:	William M. Perry <wmperry@aventail.com>
Approved by:	maintainer
ae3988ecaa
Peter Pentchev (roam) · 5.6.0
Look for the py-tkinter shared library in the correct directory when building WITH_X11.  No PORTREVISION bump - WITH_X11 did not build at all until now.

PR:		23184
Submitted by:	Donald J. Maddox <dmaddox@sc.rr.com>
6215e1467f
Peter Pentchev (roam) · 5.6.0
Update the checksum - ESR rolled a flash fix for 'smtpname' handling without releasing a new version.

Submitted by:	Donald J . Maddox <dmaddox@sc.rr.com>
e97432d2b8
Peter Pentchev (roam) · 5.6.0
Update to 5.6.0 - a fetchmail 'gold release' which fixes two minor bugs and an omission and gives ESR a chance to do some more serious development in a new development version.

Approved by:	Ville Eerola <ve@sci.fi> - maintainer
55612f9987