CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

mail/snappymail2.38.2_6

Simple, modern, lightweight & fast web-based email client

Maintainer
ports@FreeBSD.org
Packages
snappymail-php82 2.38.2_6, snappymail-php83 2.38.2_6, snappymail-php84 2.38.2_6, snappymail-php85 2.38.2_6
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://snappymail.eu/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (92)

Yusuf Yaman (nxjoseph) · 2.38.2_6
*/*: Bump consumers after migration of pecl-redis to php-redis

PR:             296771
Approved by:    vvd (mentor)
Differential Revision:  https://reviews.freebsd.org/D60581
7eaab612c9
Muhammad Moinur Rahman (bofh) · 2.38.2_5
*/*php86*: Sunrise

Please DO NOT use this version in production, it is an early test version.

For upgrade notes please visit:
https://github.com/php/php-src/blob/php-8.6.0alpha1/UPGRADING

Changelog: https://github.com/php/php-src/blob/php-8.6.0alpha1/NEWS
63b6120db0
Vsevolod Stakhov (vsevolod) · 2.38.2_5
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Yasuhiro Kimura (yasu) · 2.38.2_1
*/*: Return to pool

I'll be away from keyboard soon and am not sure if I will return. So
return all ports that I currently maintain to pool hoping new
volunteers take care of them.
f12c037f5a
Yasuhiro Kimura (yasu) · 2.38.2_1
mail/snappymail: Add upstream patch to fix runtime error with PHP 8.4

MFH:		2024Q4
f1d4462ab8
Yasuhiro Kimura (yasu) · 2.38.2
mail/snappymail: Update to 2.38.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.38.2
MFH:		2024Q4
43f7176688
Yasuhiro Kimura (yasu) · 2.38.1
mail/snappymail: Update to 2.38.1

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.38.1
MFH:		2024Q4
a77a296274
Yasuhiro Kimura (yasu) · 2.38.0
mail/snappymail: Update to 2.38.0

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.38.0
MFH:		2024Q3
Security:	bd940aba-7467-11ef-a5c4-08002784c58d
1f8e00b18a
Yasuhiro Kimura (yasu) · 2.37.3
mail/snappymail: Update to 2.37.3

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.37.3
MFH:		2023Q3
cf2364d4f1
Yasuhiro Kimura (yasu) · 2.37.2
mail/snappymail: Update to 2.37.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.37.2
MFH:		2024Q2
c0319a0773
Muhammad Moinur Rahman (bofh) · 2.36.4
*/*: Unbreak with php84

These ports were initially marked to IGNORE with php84 as their runtime
dependencies were BROKEN. As all of the runtime dependencies has been
fixed for ther requirements unmark these ports. Although these ports
build perfectly with php84 but there might still be runtime issues with
these ports with php84. The maintainers are requested to do some runtime
checks for these ports.

Approved by:	portmgr (blanket)
6373a1df1f
Muhammad Moinur Rahman (bofh) · 2.36.4
*/*: Mark IGNORE_WITH_PHP=84

These ports are currently not compatible with php84 and is only a limited
set of ports. There might be more ports which has runtime issues. Please
check if your ports are compatible with php84 and if not pleae mark them
IGNORE_WITH_PHP=84

Approved by:	portmgr (blanket)
c00a7b36df
Yasuhiro Kimura (yasu) · 2.36.4
mail/snappymail: Update to 2.36.4

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.36.4
MFH:		2024Q2
65e4257a89
Yasuhiro Kimura (yasu) · 2.36.3
mail/snappymail: Update to 2.36.3

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.36.3
MFH:		2024Q2
2cf6d8f915
Yasuhiro Kimura (yasu) · 2.36.2
mail/snappymail: Update to 2.36.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.36.2
MFH:		2024Q2
52b20988eb
Vsevolod Stakhov (vsevolod) · 2.36.1_3
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Yasuhiro Kimura (yasu) · 2.36.1
mail/snappymail: Update to 2.36.1

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.36.1
MFH:		2024Q2
ae84aa941e
Yasuhiro Kimura (yasu) · 2.36.0
mail/snappymail: Update to 2.36.0

ChangLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.36.0
MFH:		2024Q1
28ac60b15c
Yasuhiro Kimura (yasu) · 2.35.4
mail/snappymail: Update to 2.35.4

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.35.4
MFH:		2024Q1
5a5e89e57f
Yasuhiro Kimura (yasu) · 2.35.3
mail/snappymail: Update to 2.35.3

* Add security/pecl-xxtea to RUN_DEPENDS.
* Replace REDIS_RUN_DEPENDS with REDIS_USE.

ChangLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.35.3
MFH:		2024Q1
ff343ebc01
Yasuhiro Kimura (yasu) · 2.35.2_3
mail/snappymail: Fix autoconfig

When configuring a new domain and hit the Autoconfig button, an
error is occurred due the missing SimpleXML extension.

```
[2024-03-09 07:18:28.749][72d59c31] PHP[WARNING]: file_get_contents(https://autoconfig.disroot.org/.well-known/mail-v1.xml?emailaddress=test%40disroot.org): Failed to open stream: HTTP request failed! HTTP/1.1 403 Forbidden
 /usr/local/www/snappymail/snappymail/v/2.35.2/app/libraries/RainLoop/Providers/Domain/Autoconfig.php [line:64, code:2]
[2024-03-09 07:18:30.360][72d59c31] PHP[WARNING]: file_get_contents(https://disroot.org/.well-known/autoconfig/mail/config-v1.1.xml): Failed to open stream: HTTP request failed! HTTP/1.1 404 Not Found
 /usr/local/www/snappymail/snappymail/v/2.35.2/app/libraries/RainLoop/Providers/Domain/Autoconfig.php [line:64, code:2]
[2024-03-09 07:18:31.518][72d59c31] SERVICE[WARNING]: Call to undefined function simplexml_load_string()
```

After installing the simplexml extension, it just shows a bunch of
warnings, but Autoconfig works and configures the parameters
without user intervention.

```
[2024-03-09 07:20:27.683][64f93497] PHP[WARNING]: file_get_contents(https://autoconfig.disroot.org/.well-known/mail-v1.xml?emailaddress=test%40disroot.org): Failed to open stream: HTTP request failed! HTTP/1.1 403 Forbidden
 /usr/local/www/snappymail/snappymail/v/2.35.2/app/libraries/RainLoop/Providers/Domain/Autoconfig.php [line:64, code:2]
[2024-03-09 07:20:29.426][64f93497] PHP[WARNING]: file_get_contents(https://disroot.org/.well-known/autoconfig/mail/config-v1.1.xml): Failed to open stream: HTTP request failed! HTTP/1.1 404 Not Found
 /usr/local/www/snappymail/snappymail/v/2.35.2/app/libraries/RainLoop/Providers/Domain/Autoconfig.php [line:64, code:2]
```
PR:		277611
MFH:		2024Q1
746736cb56
Yasuhiro Kimura (yasu) · 2.35.2_2
mail/snappymail: Fix error while accessing admin page

On a fresh installation, the admin page returns a 500 error, indicating
a web server error. The logs reveal what the problem is, which is already
fixed in upstream [1], but until a new version of snappymail is released,
the user will see the following error:

```
RainLoop\Config\Application::SetPassword(): Argument #1 ($oPassword) must be of type SnappyMail\SensitiveString, string given, called in /usr/local/www/snappymail/snapp
ymail/v/2.35.2/app/libraries/RainLoop/Actions.php on line 672
```

Reference:	https://github.com/the-djmaze/snappymail/issues/1472 [1]
PR:		277571
MFH:		2024Q1
396010cb58
Yasuhiro Kimura (yasu) · 2.35.2_1
mail/snappymail: Add missing ctype extension

When the user first logs in to its web server with snappymail installed, the first
thing it will see is:

```
[302] The following PHP extensions are not available in your PHP configuration!

    ctype
```

PR:		277570
MFH:		2024Q1
44b591df85
Yasuhiro Kimura (yasu) · 2.35.2
mail/snappymail: Update to 2.35.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.35.1
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.35.2
MFH:		2024Q1
53bef59df1
Yasuhiro Kimura (yasu) · 2.35.0
mail/snappymail: Update to 2.35.0

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.35.0
MFH:		2024Q1
59a7615a86
Yasuhiro Kimura (yasu) · 2.34.2
mail/snappymail: Update to 2.34.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.34.2
MFH:		2024Q1
3fbce2102d
Yasuhiro Kimura (yasu) · 2.34.1
mail/snappymail: Update to 2.34.1

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.34.1
MFH:		2024Q1
9a8de8c8d8
Yasuhiro Kimura (yasu) · 2.34.0
mail/snappymail: Update to 2.34.0

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.34.0
MFH:		2024Q1
653c4dac7b
Yasuhiro Kimura (yasu) · 2.33.0
mail/snappymail: Update to 2.33.0

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.33.0
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.32.0
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.31.0
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.30.0
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.29.4
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.29.3
MFH:		2024Q1
7ab7de4b5b
Yasuhiro Kimura (yasu) · 2.29.2
mail/snappymail: Update to 2.29.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.29.2
MFH:		2023Q4
730aeb9939
Yasuhiro Kimura (yasu) · 2.29.1
mail/snappymail: Update to 2.29.1

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.29.1
MFH:		2023Q4
e78b32daaf
Yasuhiro Kimura (yasu) · 2.28.4
mail/snappymail: Update to 2.28.4

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.28.4
MFH:		2023Q3
bba460c16f
Yasuhiro Kimura (yasu) · 2.28.3
mail/snappymail: Update to 2.28.3

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.28.3
MFH:		2023Q2
d0f417d106
Yasuhiro Kimura (yasu) · 2.28.2
mail/snappymail: Update to 2.28.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.28.2
MFH:		2023Q2
73899f9f49
Yasuhiro Kimura (yasu) · 2.28.1
mail/snappymail: Update to 2.28.1

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.28.1
MFH:		2023Q2
96e821ef3a
Yasuhiro Kimura (yasu) · 2.28.0
mail/snappymail: Update to 2.28.0

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.28.0
MFH:		2023Q2
1cd7d40948
Yasuhiro Kimura (yasu) · 2.27.3
mail/snappymail: Update to 2.27.3

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.27.3
MFH:		2023Q2
ae314d899f
Muhammad Moinur Rahman (bofh) · 2.27.2
*/*: Remove merged or non-existent USE_PHP directives

- Remove USE_PHP=hash which is available in default php installation of
  all versions of php
  * security/pear-Horde_Crypt_Blowfish: Remove OPTION MHASH
- Remove USE_PHP=json which is available in default php installation of
  all versions of php
  * devel/pear-PHPTAL: Remove OPTION JSON
  * www/ilias: Remove OPTION SCORM2004
- Remove USE_PHP=mssql which is no longer available in php from php80
  and later and has been replaced with sqlsrv module which is Windows
  only
  * www/codeigniter: Remove OPTION MSSQL
  * www/moodle311: Remove OPTION MSSQL
  * www/moodle39: Remove OPTION MSSQL
  * www/moodle40: Remove OPTION MSSQL
  * www/moodle41: Remove OPTION MSSQL
- Remove USE_PHP=openssl which is available in default php installation
  of all versions of php
  * databases/phpmyadmin: Remove OPTION OPENSSL
  * databases/phpmyadmin5: Remove OPTION OPENSSL
  * security/pear-Horde_Crypt_Blowfish: Remove OPTION OPENSSL
  * www/nextcloud: Remove OPTION SSL
  * www/owncloud: Remove OPTION SSL
- Remove USE_PHP=pcre which is available in default php installation of
  all versions of php
  * sysutils/racktables: Remove OPTION PCRE
- Remove USE_PHP=postgresql which should be USE_PHP=pgsql and update
  following ports
  * www/typo3-11
  * www/typo3-12
- Remove USE_PHP=pdf which is no longer available as php module
  * databases/phpmyadmin: Remove OPTION PDF
- Remove USE_PHP=spl which is available in default php installation of
  all versions of php
- Remove USE_PHP=sqlsrv which was never imported into FreeBSD as that is
  Windows only php module
  * www/typo3-11: Remove OPTION SQLSRV
  * www/typo3-12: Remove OPTION SQLSRV
- Bump where DEFAULT OPTIONS are affected

Sponsored by:	Bounce Experts

Approved by:	portmgr(blanket)
0ac3a69555
Yasuhiro Kimura (yasu) · 2.27.2
mail/snappymail: Update to 2.27.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.27.0
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.27.1
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.27.2
MFH:		2023Q1
ef4cf11661
Yasuhiro Kimura (yasu) · 2.26.4
mail/snappymail: Update to 2.26.4

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.26.4
MFH:		2023Q1
c93b6ab11d
Yasuhiro Kimura (yasu) · 2.26.3
mail/snappymail: Update to 2.26.3

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.26.3
MFH:		2023Q1
eb383ce7ad
Yasuhiro Kimura (yasu) · 2.26.2
mail/snappymail: Update to 2.26.2

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.26.2
MFH:		2023Q1
4662347330
Yasuhiro Kimura (yasu) · 2.26.1
mail/snappymail: Update to 2.26.1

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.26.1
MFH:		2023Q1
8589de4e67
Yasuhiro Kimura (yasu) · 2.26.0
mail/snappymail: Update to 2.26.0

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.26.0
MFH:		2023Q1
029a033e8d
Yasuhiro Kimura (yasu) · 2.25.5
mail/snappymail: Update to 2.25.5

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.25.5
MFH:		2023Q1
ac011b8c3e
Yasuhiro Kimura (yasu) · 2.25.4
mail/snappymail: Update to 2.25.4

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.25.2
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.25.3
ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.25.4
MFH:		2023Q1
0b7cad276b
Yasuhiro Kimura (yasu) · 2.25.1
mail/snappymail: Update to 2.25.1

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.25.1
MFH:		2023Q1
0de4c37d85
Yasuhiro Kimura (yasu) · 2.25.0
mail/snappymail: Update to 2.25.0

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.25.0
MFH:		2023Q1
30ce8d71aa
Yasuhiro Kimura (yasu) · 2.24.6
mail/snappymail: Update to 2.24.6

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.24.6
MFH:		2023Q1
cedc9b6b1d
Yasuhiro Kimura (yasu) · 2.24.5
mail/snappymail: Update to 2.24.5

ChangeLog:	https://github.com/the-djmaze/snappymail/releases/tag/v2.24.5
MFH:		2023Q1
215c3a49e9