CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

mail/qmail 1.06_7

Secure, reliable, efficient, simple, and fast MTA

Port info

Maintainer
erdgeist@erdgeist.org
Packages
latest: 1.06_7
Upstream
up to date
Last update
to 1.06_7 · fff227115a
Quarterly
2026Q4: 1.06_7
WWW
https://cr.yp.to/qmail.html
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install netqmail
installs 1.06_7 from latest; from quarterly (2026Q4) 1.06_7
Port
# cd /usr/ports/mail/qmail && make install clean
# make -C /usr/ports/mail/qmail config  # change options first
Size
258 KiB download · 1.0 MiB installed
Depends on
nothing
Creates
user alias, qmaild, qmaill, qmailp, qmailq, qmailr, qmails, group qmail, qnofiles
Options
3 of 16 on in the package: DNS_CNAME DOCS RCDLINK
Show the 13 options that are off
BIG_CONCURRENCY_PATCH BIG_TODO_PATCH BLOCKEXEC_PATCH DISCBOUNCES_PATCH EXTTODO_PATCH LOCALTIME_PATCH MAILDIRQUOTA_PATCH OUTGOINGIP_PATCH QEXTRA QMTPC_PATCH SMTP_AUTH_PATCH SPF_PATCH TARPIT_PATCH
pkg-message
Shown after installing
ATTENTION:

You can enable qmail as your default mailer executing:
> /var/qmail/scripts/enable-qmail

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.06_71.06_7–
FreeBSD 151.06_71.06_7–
FreeBSD 141.06_71.06_71.06_7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.06_71.06_7–
FreeBSD 141.06_71.06_71.06_7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (2)

The CVE record lists the packaged version 1.06_7 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2020-38117.52020-05-26qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.
CVE-2020-38125.52020-05-26qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere …

VuXML only (0)

Listed in VuXML, the packaged version 1.06_7 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (287)

Florent Thoumie (flz) · 1.03_4
- Update TLS patch to 20021228.

PR:		ports/81768
Submitted by:	maintainer
de14006c65
Florent Thoumie (flz) · 1.03_4
- Update mysql patch to 1.1.11.

PR:		ports/81766
Submitted by:	maintainer
e92a83295a
Roman Bogorodskiy (novel) · 1.03_4
Fix URL of smtp_auth+tls patch.

PR:		81769
Submitted by:	Renato Botelho (maintainer)
93d5428f29
Florent Thoumie (flz) · 1.03_4
- Add SPF checker patch.

PR:		ports/81731
Submitted by:	maintainer
165b7a397f
Sergey Matveychuk (sem) · 1.03_4
- Update to spamcontrol-2314

Changes since 2313:
- FIXED bug in badhelo's wildmat filter.
- CHANGED qmail-smtpd error logging order.
- REMOVED remnants from SPAMCONTROL 2.3 in man page for qmail-send(9).
- UPDATED qmail-alias2recipients.

PR:		ports/81466
Submitted by:	maintainer
6bd5cd3a7c
Roman Bogorodskiy (novel) · 1.03_4
Make pkg-install not to create wrong file in /var/qmail/alias.

PR:		81467
Submitted by:	Renato Botelho (maintainer)
8922b5cb8b
Sergey Matveychuk (sem) · 1.03_4
- Add maildirquota (Maildir++) support to qmail. - Add block-executables support to qmail. - Add discard-double-bounces patch to qmail.

PR:		ports/60440
Submitted by:	ale
Reworked by:	maintainer
a8971230e4
Sergey Matveychuk (sem) · 1.03_4
- Rewrite pkg-install using switch case for PRE-INSTALL and POST-INSTALL   parameters, and, use this parameters to call PKGINSTALL on Makefile. - Remove some redundant things from Makefile and use it only on   pkg-install. - Move pkg-install to files/pkg-install.in because i'm using some   %%MACROS%% on this.

PR:		ports/80911
Submitted by:	maintainer
0695fe3817
Pav Lucistnik (pav) · 1.03_4
- Re-add NO_PACKAGE restriction which was accidentally (?) removed in 1.59

Approved by:	maintainer
cf7257f132
Pav Lucistnik (pav) · 1.03_4
- Add QMTPC patch, it closes PR ports/54002 - Add LOCALTIME patch, that emit dates in local timezone - Add BROKEN message if QMTPC and OUTGOINGIP patches are selected simultaneously - Rename BARRIER vars to a short name - Change DISTDIR to download all qmail related files on qmail subdir

PR:		ports/80864
Submitted by:	Renato Botelho <freebsd@galle.com.br> (maintainer)
eccdf4981e
Pav Lucistnik (pav) · 1.03_4
- Unbreak package building: syntax errors and logical mistakes in pkg-install

Approved by:	maintainer
6551908e76
Sergey Matveychuk (sem) · 1.03_4
- Transfer all work to MASTER port and make slave ports easier - Use only one pkg-plist and use PLIST_SUB - Use DOCSDIR intead of DOCDIR - OPTIONS'ify - Remove WITH_PRESERVE_CONFIG_FILES knob and detect automatically when is need   to create it. - Add $FreeBSD$ tag to pkg-plist and pkg-install - Fix error on enable-qmail script - Remove MASTER_SITE_QMAIL definition from Makefile since it's defined

PR:		ports/80833
Submitted by:	maintainer
Thanks to:	novel, Joao Ricardo P. Mendes <joao@redepegasus.com.br>
2aa88641dc
Sergey Matveychuk (sem) · 1.03_3
o Pacify a lot of portlint WARN and FATAL messages o Change ${PERL} to ${SED} or ${REINPLACE_CMD} o Added patch patch-qmail-1.03-rfc2821.diff to search other MX servers   when the first return a code > 500 and < 599 o Install mkaliasdir script on ${PREFIX}/scripts directory o Remove targets to disable-qmail and enable-sendmail and put it on a   shell script that is installed on /var/qmail/scripts.

PR:		ports/79094
Submitted by:	maintainer
f49371e1f6
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_3
Give maintainership to Renato Botelho <freebsd@galle.com.br> who has been submitting outstanding PRs for all qmail ports I have been maintaining up to this moment. They will be in good hands.
718a4f3479
Sergei Kolobov (sergei) · 1.03_3
- Allow MAINTAINER override in slave port(s)
5bbbb280ed
Sergei Kolobov (sergei) · 1.03_3
- Allow addition to MASTER_SITES by slave ports - in preparation   for a new slave port: qmail-spamcontrol
ca6cca109d
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_3
o Allow slave ports to: 	- add MAN{1,5,7,8} pages 	- add extra ALL_TARGET

PR:		77553
Submitted by:	Renato Botelho <renato@galle.com.br>
25d0cab09e
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_3
Add a WITH_PRESERVE_CONFIG_FILES knob which stops qmail from running the configuration scripts upon installation (or, upgrade)

PR:		67828
Submitted by:	Renato Botelho <renato@galle.com.br>
cfa8b4dda2
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_3
Chase outgoingip.patch checksum change: just a cosmetic change, patch stays the same

PR:		65068
Submitted by:	Greg Panula <greg.panula@lexisnexis.com>
7f1f20f99f
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_3
Fix typo in qmail-smtp_auth+tls patch size

PR:		64550
Submitted by:	Brad Davis <so14k@so14k.com>
1ca561c534
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_3
o Add checksum for soon to be added qmail-smtp_auth+tls patch slave   level 20020519 o House a copy under MASTER_SITE_LOCAL
beded4b813
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_3
o Add both hoststat and purgestat entries for qmail's mailer.conf   mailwrapper sample configuration o Bump PORTREVISION

Submitted by:	Luca Morettoni <luca@morettoni.net>
db109513fe
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_2
USE_SIZEify
43485240fb
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_2
1) PORTREVISION bump due to [3] and [4] 2) distinfo - update checksum for outgoingip.patch: no major change    in code 3) New patch files/patch-qmail-local.c 	-  Erik Sjlund pointed out a bug in qmail-local at 	http://www.ornl.gov/its/archives/mailing-lists/qmail/2000/10/msg00696.html 	- Precedence bug corrected by adding parentheses which 	affects .qmail files parsing code 4) Add qmail's sendmail

Submitted by:	too many [2]
Obtained from:	http://www.qmail.org/ [3] [4]
7324117abc
Trevor Johnson (trevor) · 1.03_1
Define USE_PERL5_BUILD, not erroneous USE_PERL.

Submitted by:	Oliver Eikemeier
7e223b8511
Trevor Johnson (trevor) · 1.03_1
Define USE_PERL to make Perl available for (mostly deprecated) "perl -pi -e" construction.
318a536982
Tilman Keskinoz (arved) · 1.03_1
shorten COMMENT and remove CAPS.

PR:		49971
Submitted by:	Matthias Andree <matthias.andree@web.de>
Approved by:	maintainer (implicit)
28f4cd7c67
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Add WITH_OUTGOINGIP_PATCH (outgoingip.patch) option: allow setting the IP address used by qmail when sending outgoing messages

Prompted by:		Brad Davis <so14k@so14k.com>
Feature requested by:	many
79ca3b8011
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
De-pkg-comment
74740483d0
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Sanitize MASTER_SITES

Submitted by:	fenner's distfile survey
b2b0cd617a
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Update to current standards for rc.conf(5) file: disable sendmail by setting sendmail_enable to NONE instead of NO

Prompted by:	too many
b0eefe12d2
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Style fix: replace the 8 for the 7 bits quote character
eb3358e855
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Sanitize MASTER_SITES

Submitted by:	fenner's distfiles survey
43b5a4c62c
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Remove repeated entry in MASTER_SITES
1ffacca12a
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Sanitize MASTER_SITES

Submitted by:	fenner's distfile survey
6eca7467f7
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Update to qmail-ldap patch version 20020901
2a9f7d7272
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Update qmail-tls patch to 1.03.20020825
c480ec1d9c
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Sanitize MASTER_SITES
d18871e560
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Update to qmail-ldap patch version 20020501a
d18f689c05
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Chase checksum of a patch: patch was trimmed, no further changes

Submitted by:	Paulius Bulotas <paulius@kaktusas.org>
ddab25c8f5
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Sanitize MASTER_SITES
bf09b3e4ae
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Sanitize MASTER_SITES

Submitted by:	fenner distifile survey
e82dea8400
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
o Fix breakage introduced in last rev: - Comma operator does not work for {DIST,PATCH}FILES just yet,   re-arrange groups to achieve similar effect
def53cc628
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
o Both sanitize MASTER_SITES and add additional ones o Full deployment of MASTER_SITES:n
59a15dbf41
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Update qmail-tls patch to 1.03.20010627
7ddfd112ea
Akinori MUSHA (knu) · 1.03_1
Use ${ECHO_CMD} instead of ${ECHO} where you mean the echo command; the ECHO macro is set to "echo" by default, but it is set to "true" if make(1) is invoked with the -s option while ECHO_CMD is always set to the echo command.
897d06aa97
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Update qmail-mysql to patch level 1.1.8
3ce4e629d7
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Fix message typo

Submitted by:	Nicolas Rachinsky <list@rachinsky.de>
83887178a5
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
add checksum for soon to be qmail-ldap patch level 20011001a
d1ac55fcd8
Mario Sergio Fujikawa Ferreira (lioux) · 1.03_1
Add updated distinfo for qmail-ldap slave port: ldap patch version 20010501
f84997055e