CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

mail/postfix 3.11.7_4,1

Secure alternative to widely-used Sendmail

Port info

Maintainer
otis@FreeBSD.org
Packages
latest: postfix 3.11.7_4,1, postfix-ldap 3.11.7_4,1, postfix-mongo 3.11.7_4,1, postfix-mysql 3.11.7_4,1, postfix-pgsql 3.11.7_4,1, postfix-sasl 3.11.7_4,1, postfix-sqlite 3.11.7_4,1
Upstream
up to date
Last update
to 3.11.7_4,1 · 85ba298b7e
Quarterly
2026Q4: postfix 3.11.7_3,1, postfix-ldap 3.11.7_3,1, postfix-mongo 3.11.7_3,1, postfix-mysql 3.11.7_3,1, postfix-pgsql 3.11.7_3,1, postfix-sasl 3.11.7_3,1, postfix-sqlite 3.11.7_3,1 · last MFH 8168af0c2e
Formerly
mail/postfix-ldap-sasl until 2021-10-28, mail/postfix-sasl until 2021-10-28
WWW
https://www.postfix.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install postfix
# pkg install postfix-ldap
# pkg install postfix-mongo
# pkg install postfix-mysql
# pkg install postfix-pgsql
# pkg install postfix-sasl
# pkg install postfix-sqlite
installs postfix 3.11.7_4,1, postfix-ldap 3.11.7_4,1, postfix-mongo 3.11.7_4,1, postfix-mysql 3.11.7_4,1, postfix-pgsql 3.11.7_4,1, postfix-sasl 3.11.7_4,1, postfix-sqlite 3.11.7_4,1 from latest; from quarterly (2026Q4) postfix 3.11.7_3,1, postfix-ldap 3.11.7_3,1, postfix-mongo 3.11.7_3,1, postfix-mysql 3.11.7_3,1, postfix-pgsql 3.11.7_3,1, postfix-sasl 3.11.7_3,1, postfix-sqlite 3.11.7_3,1
Port
# cd /usr/ports/mail/postfix && make install clean
# make -C /usr/ports/mail/postfix config  # change options first
Size
1.8 MiB download · 8.4 MiB installed
Depends on
databases/lmdb0 0.9.36_1, databases/tinycdb 0.81, devel/icu 76.1,1, devel/pcre2 10.49, mail/libtlsrpt 0.5.1
License
EPL and IPL10
Creates
user postfix, group mail, maildrop, postfix
Options
9 of 22 on in the package: BLOCKLISTD CDB DOCS EAI LMDB LMDB0 PCRE2 TLS TLSRPT
Show the 13 options that are off
BDB INST_BASE LDAP LMDB1 MONGO MYSQL NIS PGSQL SASL SASLKMIT SASLKRB5 SQLITE TEST
pkg-message
Shown after installing
To use postfix instead of sendmail:
  - clear sendmail queue and stop the sendmail daemons

Run the following commands to enable postfix during startup:
  - sysrc postfix_enable="YES"
  - sysrc sendmail_enable="NONE"

If postfix is *not* already activated in /usr/local/etc/mail/mailer.conf
  - mv /usr/local/etc/mail/mailer.conf /usr/local/etc/mail/mailer.conf.old
  - install -d /usr/local/etc/mail
  - install -m 0644 /usr/local/share/postfix/mailer.conf.postfix /usr/local/etc/mail/mailer.conf

Disable sendmail(8) specific tasks,
add the following lines to /etc/periodic.conf(.local):
  daily_clean_hoststat_enable="NO"
  daily_status_mail_rejects_enable="NO"
  daily_status_include_submit_mailq="NO"
  daily_submit_queuerun="NO"

If you are using SASL, you need to make sure that postfix has access to read
the sasldb file.  This is accomplished by adding postfix to group mail and
making the /usr/local/etc/sasldb* file(s) readable by group mail (this should
be the default for new installs).
Shown after removing
If you remove postfix permanent, adjust / remove the the following file:
  - /usr/local/etc/mail/mailer.conf
Note
Size, dependencies, options and messages are those of postfix.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.11.7_4,13.11.7_3,1–
FreeBSD 153.11.7_4,13.11.7_3,1–
FreeBSD 143.11.7_4,13.11.7_3,13.11.7_4,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.11.7_3,13.11.7_3,1–
FreeBSD 143.11.7_3,13.11.7_1,13.11.7_3,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.11.7_4,1.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
299271maintainer-feedback? mail/postfix: lmdb version issue fixed in main but not 2026Q4New2026-10-14

Commits (447)

Yen-Ming Lee (leeym) · 2.0.6,1
update postfix to 2.0.6

this is a security critical release -- it works around the same bug that was
recently patched in sendmail to protect any unpatched sendmail servers behind
a postfix gateway.

this fix allows one to leave postfix as the gateway machine when there are
unpatched sendmail servers, rather than having to install sendmail on your
gateway.

PR:		49006
Submitted by:	Vivek Khera <khera@kcilink.com>
Approved by:	kris
c407c1d0f0
Yen-Ming Lee (leeym) · 2.0.4,1
Batch building of packages for postfix is failing due to PCRE issues.

PR:		48896
Submitted by:	Vivek Khera <khera@kcilink.com>
ad1a88f011
Jacques Vidrine (nectar) · 2.0.4,1
Spell `-ldes' as `-lcrypto'.
aa6fa9277a
Edwin Groothuis (edwin) · 2.0.4,1
Point dependencies on net/openldap to net/openldap12
f71e429079
Yen-Ming Lee (leeym) · 2.0.4,1
add PORTEPOCH=1, which was removed by maintainer in rev 1.67
8c349a2568
Dmitry Sivachenko (demon) · 2.0.4
Add missing manpage.
2b177d6605
Yen-Ming Lee (leeym) · 2.0.4
update postfix to 2.0.4

PR:		48531
Submitted by:	Vivek Khera <khera@kcilink.com>
5ab3e5131a
Akinori MUSHA (knu) · 2.0.2,1
De-pkg-comment.
4d0a0dc1c6
SADA Kenji (sada) · 2.0.2,1
upgrade to version 2.0.2 PR:	ports/47110 Submitted by:	maintainer
2f341d2e47
Pete Fritchman (petef) · 2.0.0.2,1
Update to 2.0.0.2.

PR:		46691
Submitted by:	maintainer
bf133b48fb
Sean Chittenden (seanc) · 1.1.12,1
Missed configure scripts in libpq version bump: chase lib version.
854109b51e
Ying-Chieh Liao (ijliao) · 1.1.12,1
upgrade to 1.1.12

PR:		45802
Submitted by:	maintainer
d9c1c83acd
David W. Chapman Jr. (dwcjr) · 1.1.11,1
Add hooks to preselect postfix options Update TLS

PR:		42047
Submitted by:	maintainer, knu
28dd49eae4
Hajimu UMEMOTO (ume) · 1.1.11,1
moving saslv1 includes files to make it easier to add saslv2

PR:		ports/40288
Submitted by:	Mathieu Arnold <m@absolight.net>
Approved by:	knu
b211a1e6c4
David W. Chapman Jr. (dwcjr) · 1.1.11,1
Update to 1.1.11

PR:		3954
Submitted by:	maintainer
0334a1d64e
David W. Chapman Jr. (dwcjr) · 1.1.10,1
Update to latest

PR:		38153
Submitted by:	maintainer
68e8c5b96b
David W. Chapman Jr. (dwcjr) · 1.1.9,1
Update to 1.1.9 make PCRE and SASL libs dynamically linked

PR:		38081
Submitted by:	maintainer
344d42d7fb
David W. Chapman Jr. (dwcjr) · 1.1.8,1
Add PGSQL support

PR:		37864
Submitted by:	maintainer
8e96515ce1
David W. Chapman Jr. (dwcjr) · 1.1.8,1
Add missing pkg-message

Submitted by:	hayashi@totalware.gifu.gifu.jp
8927e4d9e5
David W. Chapman Jr. (dwcjr) · 1.1.8,1
Update to 1.1.8 Re-enable IPv6 with non official patch

PR:		37798
Submitted by:	maintainer
60532c8c60
David W. Chapman Jr. (dwcjr) · 1.1.7,1
handle batch builds

PR:		37259
Submitted by:	maintainer
1ec398cabb
David W. Chapman Jr. (dwcjr) · 1.1.7,1
Update postfix to 1.1.7

PR:		36621
Submitted by:	maintainer
b520b150e5
Maxim Sobolev (sobomax) · 1.1.5,1
Add USE_SUBMAKE, where it might be necessary.
62f2687e21
David W. Chapman Jr. (dwcjr) · 1.1.5,1
Update to 1.1.5

PR:		36058
Submitted by:	maintainer
cb43f23b04
David W. Chapman Jr. (dwcjr) · 1.1.4,1
Update postfix to 1.1.4

PR:		35347
Submitted by:	maintainer
52ec123b2f
David W. Chapman Jr. (dwcjr) · 1.1.3,1
Update to 1.1.3 Update to latest TLS Give Vivek Khera Maintainership Fix loss of config files during upgrade

PR:		34837
Submitted by:	maintainer
c5043654af
David W. Chapman Jr. (dwcjr) · 1.1.2_1,1
Add missing files to pkg-plist Fix config files from being erased.

Submitted by:	Vivek Khera
27342cc2fb
David W. Chapman Jr. (dwcjr) · 1.1.2,1
Update to 1.1.2 (yes they are finally using versions)

Submitted by:	Vivek Khera
38a2f47cdc
Akinori MUSHA (knu) · 20010228.8_1
Use ${ECHO_CMD} instead of ${ECHO} where you mean the echo command; the ECHO macro is set to "echo" by default, but it is set to "true" if make(1) is invoked with the -s option while ECHO_CMD is always set to the echo command.
897d06aa97
David W. Chapman Jr. (dwcjr) · 20010228.8_1
Set context of diff for patch-aa to 2 lines to allow tls patching

PR:		33992
Noticed by:	des, et al.
a6477a4d07
Jacques Vidrine (nectar) · 20010228.8_1
Disable debugger by default

Approved by:	dwcjr (MAINTAINER)
baa2010112
David W. Chapman Jr. (dwcjr) · 20010228.8_1
Add header/body_check warnings command Bump PORTREVISION

Submitted by:	osa@freebsd.org.ru
6b072f9c01
David W. Chapman Jr. (dwcjr) · 20010228.8
Update to pl08 and tls to go with it.

PR:		32007
Submitted by:	osa@FreeBSD.org.ru
6caca0d9cf
David W. Chapman Jr. (dwcjr) · 20010228.7
Update to pl07

PR:		32000
Submitted by:	osa@FreeBSD.org.ru
ac9a7acea3
David W. Chapman Jr. (dwcjr) · 20010228.6
Update postfix to 20010228-pl06 and update tls to go with it.
6055642cec
David W. Chapman Jr. (dwcjr) · 20010228.5_1
Fix path in patch

PR:		30547
Submitted by:	hanahara@meiko.co.jp
6b673f0db0
David W. Chapman Jr. (dwcjr) · 20010228.5_1
Erase extra parts of install.cf

Submitted by:	Yen-Ming Lee
e968925f20
David W. Chapman Jr. (dwcjr) · 20010228.5_1
Remove version tags from files that don't need it.
13de590622
David W. Chapman Jr. (dwcjr) · 20010228.5_1
Install install.cf to ensure spool is created with correct permissions Bump PORTREVISION

PR:		30751
Submitted by:	Yen-Ming Lee
0913fc4972
David W. Chapman Jr. (dwcjr) · 20010228.5
Update to pl05 Change DISTNAME to use regex Update tls and ipv6 to pl04

Pointed out by:	petef
4e63e4dd34
David W. Chapman Jr. (dwcjr) · 20010228.3_3
Fix path on main.cf in reference to prefix Bump PORTREVISION

PR:		30547
Submitted by:	hanahara@meiko.co.jp
eadccd4ec3
Kris Kennaway (kris) · 20010228.3_2
Correct the size of the dialog box so dialog(1) doesn't bug out and trash the unused lower half

Submitted by:	eric
3eb5fe10de
Akinori MUSHA (knu) · 20010228.3_2
Back out the db3 port update because some of these dependent ports had been broken by the incompatibility between db3.2 and db3.3.

I am unconditionally bumping the PORTREVISION's to eliminate possible
troubles that should not happen before the coming release.

Sorry for inconvenience.  I'll try to check compatibility hard before
committing next time.
79f86fd6ec
Akinori MUSHA (knu) · 20010228.3_1
Reflect databases/db3's shlib version bump from 2 to 3.
dd8fc61f89
David W. Chapman Jr. (dwcjr) · 20010228.3
Update to pl3 of postfix Update TLS and IPv6 to go with new postfix version
4f9a79176b
David W. Chapman Jr. (dwcjr) · 20010228.2
I'm taking over this port for Blaz since he can't dedicate time to it and I am already maintaining postfix-current.

Submitted by:	maintainer
bc7ca8c404
Jun Kuriyama (kuriyama) · 20010228.2
Update port to 20010228 pl02. pkg-plist cleanup. Update to TLS patch 0.7.2. Update to IPv6 patch 20010228pl02-v6-20010503a. Complain if user tries to compile with both TLS and IPv6 enabled. Complain if user tries to compile with IPv6 on non-i386 platform (ie alpha). Change maintainer e-mail address.

Submitted by:	blaz@si.FreeBSD.org (maintainer)
PR:		ports/27098
99f83fd8a1
Michael Haro (mharo) · 20010228.1
update postfix to 20010228-pl01

PR:		26211
Submitted by:	    maintainer
15113dbdbb
Jun Kuriyama (kuriyama) · 20010228
Revert previous commit.

sendmail_enable="YES" in rc.conf executes /usr/sbin/sendmail at
startup.  But mysql-client.sh is not yet executed at that stage.
53348cb980
Jun Kuriyama (kuriyama) · 20010228
Link shared library for MySQL.

Submitted by:	Renaud Waldura <renaud+freebsd-bugs@waldura.org>
PR:		ports/25967
Approved by:	maintainer
9ba9c792a9