CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

misc/amanda-server 3.5.1_1,1

Advanced Maryland Automatic Network Disk Archiver (server)

Port info

Maintainer
fbsd@dylanleigh.net
Packages
latest: 3.5.1_1,1
Upstream
up to date
Last update
to 3.5.1_1,1 · 665065a118
Quarterly
2026Q4: 3.5.1_1,1
WWW
https://sourceforge.net/projects/amanda/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install amanda-server
installs 3.5.1_1,1 from latest; from quarterly (2026Q4) 3.5.1_1,1
Port
# cd /usr/ports/misc/amanda-server && make install clean
# make -C /usr/ports/misc/amanda-server config  # change options first
Size
861 KiB download · 3.7 MiB installed
Depends on
archivers/gtar 1.35_1, converters/p5-JSON 4.10, devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, lang/perl5.42 5.42.3, misc/amanda-client 3.5.1_1,1, misc/amanda-perl-wrapper 1.01, textproc/p5-XML-Simple 2.25
License
UMD
Creates
user amanda, group amanda, operator
Options
1 of 4 on in the package: GNUTAR
Show the 3 options that are off
PLOT S3 SAMBA
pkg-message
Shown after installing
Please install these ports (they are only on-demand runtime dependencies):
  - /usr/ports/misc/mtx if you want chg-robot changer.
  - /usr/ports/security/aespipe if you want amcrypt(8).

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.5.1_1,13.5.1_1,1–
FreeBSD 153.5.1_1,13.5.1_1,1–
FreeBSD 143.5.1_1,13.5.1_1,13.5.1_1,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.5.1_1,13.5.1_1,1–
FreeBSD 143.5.1_1,13.5.1_1,13.5.1_1,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 3.5.1_1,1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2022-377033.32022-09-13In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists or not a…

VuXML only (0)

Listed in VuXML, the packaged version 3.5.1_1,1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (2) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
287215maintainer-feedback? misc/amanda-server: three patches to let Amanda cope with Perl 5.40New2026-08-05
278187maintainer-feedback? misc/amanda-server 3.5.1 notes for UPDATINGNew2024-04-05

Commits (189)

Pav Lucistnik (pav) · 3.2.0,1
- Disallow from pointyhat: needs threaded perl

Reported by:	pointyhat
5e9ac1971e
Jun Kuriyama (kuriyama) · 3.2.0,1
Finally upgrade amanda-{server,client} to 3.2.0.  Old 2.6.x was repocopied as amanda26-{server,client}.  Please stay in 2.6.x branch if you are conservative.  Yes, you should so for important infrastructre like as backup system :-).

New 3.2.0 port includes:
  - Use misc/amanda-perl-wrapper as perl5 interpreter which is linked
    with libthr.so to avoid thread problem.
  - Unique UID, GID assigned and use it by default.  amanda user/group
    will be added automatically when not exist.
  - Deprecate AMANDA_{CONFIG,TAPE} port knobs.  They can be set in
    runtime config easily.

References:	http://wiki.zmanda.com/index.php/3.2_features
85bf840c94
Renato Botelho (garga) · 2.6.1p2_2,1
Change default samba dependency to 3.4 since samba3 is gone
e5da75e577
Jun Kuriyama (kuriyama) · 2.6.1p2_2,1
- Add workaround for glib-2.24 [1]. - Allow to choose samba port [2].

PR:		ports/146768 [1], ports/146769 [2]
Submitted by:	Ricky Morse <remorse@partners.org> [1,2]
f51da86276
Peter Pentchev (roam) · 2.6.1p2_1,1
Chase the ftp/curl shlib version bump.
29863648e3
Jun Kuriyama (kuriyama) · 2.6.1p2,1
- Upgrade to 2.6.1p2.
0d725d9b97
Dmitry Marakasov (amdmi3) · 2.6.1p1,1
- Switch SourceForge ports to the new File Release System: categories starting with M
a13d9a603d
Jun Kuriyama (kuriyama) · 2.6.1p1,1
- Upgrade to 2.6.1p1. - Remove  *PORTRANGE knobs which can be set in config file nowadays.
853ebd9e7b
Jun Kuriyama (kuriyama) · 2.6.1_1,1
Grr, I forgot to add patch files in previous commit...
2c0c968309
Jun Kuriyama (kuriyama) · 2.6.1,1
- Upgrade to 2.6.1. - Turn on SSH auth by default. - Sorry, previous default path of $AMANDA_DATES was typo.  Fixed here   it should be.  Please take care when upgrading.

PR:	ports/131193 (partially merged to my update modifications) [1]
Submitted by:	Goran Lowkrantz <glz@hidden-powers.com> [1]
128a9e1430
Jun Kuriyama (kuriyama) · 2.6.0p2,1
Add $AMANDA_DATES knob to allow setting amandates file location.

PR:		ports/130244 (based on)
Submitted by:	"Douglas K. Rand" <rand@meridian-enviro.com>
2e2133663d
Pav Lucistnik (pav) · 2.6.0p2,1
- Remove conditional checks for FreeBSD 5.x and older
f28d272707
Jun Kuriyama (kuriyama) · 2.6.0p2,1
Finally upgrade to 2.6.0p2.

Old 2.5.x version is repocopied as misc/amanda25-{server,client}.
If you have backup clients which cannot be upgraded to 2.6.x, use these
old ports or disable usetimestamps option (enabled by default, which
is incompatible with 2.5.x) in amanda.conf.

More minor improvements will follow.

PR:		ports/128836
Submitted by:	Goran Lowkrantz <glz@hidden-powers.com>
Urged by:	many
5cefa4a292
Rong-En Fan (rafan) · 2.5.1p3_5,1
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
741aa71483
Ade Lovett (ade) · 2.5.1p3_5,1
Conversion from (now defunct) autoconf-2.61 to autoconf-2.62

Tested by:	exp build run (erwin)
771ea13f41
Jun Kuriyama (kuriyama) · 2.5.1p3_5,1
- Fix SSH option and openssl related scripts [1]. - Change UNIQUENAME and LATEST_LINK to use separated options db.

PR:		ports/125566 [1]
Submitted by:	Franz Schwartau <franz@electromail.org> [1]
b9074b86bf
Edwin Groothuis (edwin) · 2.5.1p3_4,1
Fix port revision going backwards due to devel/gettext update.
1dd1c20533
Edwin Groothuis (edwin) · 2.5.1p3_1,1
Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)
090059a210
Martin Wilke (miwi) · 2.5.1p3_3,1
- Remove unneeded dependency from gtk12/gtk20 [1] - Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG - Remove X11BASE support in favor of LOCALBASE or PREFIX - Use USE_LDCONFIG instead of INSTALLS_SHLIB - Remove unneeded USE_GCC 3.4+

Thanks to all Helpers:
	Dmitry Marakasov, Chess Griffin, beech@, dinoex, rafan, gahr,
	ehaupt, nox, itetcu, flz, pav

PR:		116263
Tested on:	pointyhat
Approved by:	portmgr (pav)
3e4ed01146
Pav Lucistnik (pav) · 2.5.1p3_3,1
- Remove an odd looking misplaced patch file
839a85d058
Pav Lucistnik (pav) · 2.5.1p3_3,1
- Add SSH option

PR:		ports/118039
Submitted by:	Ekkehard 'Ekki' Gehm <gehm@physik.tu-berlin.de>
Approved by:	maintainer timeout (kuriyama; 4 months)
602609e11b
Jun Kuriyama (kuriyama) · 2.5.1p3_3,1
- Add AESPIPE knob for $OPTIONS.

PR:		ports/112073 (but I changed default to off)
Submitted by:	"Ekkehard 'Ekki' Gehm" <gehm@physik.tu-berlin.de>
d6e28ed1ca
Edwin Groothuis (edwin) · 2.5.1p3_3,1
Remove always false/true due to OSVERSION.
387f4a3b2a
Mark Linimon (linimon) · 2.5.1p3_3,1
Switch autoconf dependency to 2.61.

PR:		ports/116639
Submitted by:	aDe
4cfd5f88de
Mark Linimon (linimon) · 2.5.1p3_2,1
Add WANT_PERL.  This will be needed to conditionalize bsd.perl.mk inclusion.

Approved by:	maintainer
77933c739b
Jun Kuriyama (kuriyama) · 2.5.1p3_2,1
- Fix AMANDA_PORTRANGE knob, and rename it to AMANDA_TCPPORTRANGE.

PR:		ports/110687
Submitted by:	"Douglas K. Rand" <rand@meridian-enviro.com>
c656eb4500
Jun Kuriyama (kuriyama) · 2.5.1p3_1,1
Quick fix for broken client.

Submitted by:	Craig Boston <craig@yekse.gank.org>
59308818c5
Jun Kuriyama (kuriyama) · 2.5.1p3,1
- Upgrade to 2.5.1p3.
d6f02bc1ca
Jun Kuriyama (kuriyama) · 2.5.1p2,1
- Upgrade to 2.5.1p2. - Add a patch to fix amfetchdump to dump core [1]. - Fix GNUTAR, DUMP_SNAPSHOT options handling [2].

Submitted by:	Andy Hilker <ah@cryptobank.de> [1][2]
PR:		ports/105635 [1], ports/105942 [2]
6f1bcedf57
Jun Kuriyama (kuriyama) · 2.5.1p1,1
- Upgrade to 2.5.1p1. - Use $OPTIONS.
875becc4fd
Kris Kennaway (kris) · 2.5.0p2,1
Chase net/samba to net/samba3 in preparation for removal of the former.
48859cce81
Jun Kuriyama (kuriyama) · 2.5.0p2,1
- Upgrade to 2.5.0p2.   (Introducing new features.  Please see ChangeLog for detail.)

Urged by:	many
e456d4beb4
Jun Kuriyama (kuriyama) · 2.4.5p1,1
Fix incorrect $PORTNAME usage.
2cccea9a40
Jun Kuriyama (kuriyama) · 2.4.5p1,1
- Grab maintainership. - Upgrade to 2.4.5p1. - Add WITH_AMANDA_DUMP_SNAPSHOT knob to use "dump -L" to take a dump. - Add a patch to fix expr(1) argument problem for chg-zd-mtx.sh script. - Shorten long Makefile by collect common options/variables to one   common place.
c9a8af1cea
Mark Linimon (linimon) · 2.4.5_2,1
FreeBSD 3.x systems are no longer supported, so this code is moot.  In any case, .error is deprecated.
304c880aca
Edwin Groothuis (edwin) · 2.4.5_2,1
eplace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)
d568611c3e
Pav Lucistnik (pav) · 2.4.5_2,1
- Add SHA256
70231c0b10
Ade Lovett (ade) · 2.4.5_2,1
Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
	http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.
54a0b86543
Marcus Alves Grando (mnag) · 2.4.5_2,1
Add archivers/gtar dependencies Bump PORTREVISION Fix pkg-plist Make portlint happyer

PR:		87426
Notified by:	Patrick M. Hausen <hausen@punkt.de>
01a8881121
Sam Lawrance (lawrance) · 2.4.5_1,1
- Add a patch to fix a buffer overflow crash (tended to show   itself on 4.x systems). - Bump PORTREVISION.

PR:		ports/81104
Submitted by:	Laurent DAVERIO <daverio@cri.ensmp.fr> (PR)
		John E Hein <jhein@timing.com> (fix)
7599294502
Patrick Li (pat) · 2.4.5,1
Fix maintainer
cdce6deb0b
James E. Housley (jeh) · 2.4.5,1
Release maintainership due to time
41e30b5ad7
James E. Housley (jeh) · 2.4.5,1
Update to 2.4.5
0229245fb9
David E. O'Brien (obrien) · 2.4.4p4_2,1
At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.
c3d8037aeb
David E. O'Brien (obrien) · 2.4.4p4_2,1
Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
f2fc2d60ae
James E. Housley (jeh) · 2.4.4p4_2,1
GNUTAR_LISTDIR was partialaly a variable and partially hardcoded

PR:		73956
Submitted By:	Phil Homewood <pdh@bne.snapgear.com>
95833ffed9
James E. Housley (jeh) · 2.4.4p4_1,1
As pointed out in PR ports/73956, even if a user and/or group was specified there were two chown statements they were ignored.

PR:		73956
Submitted By:	Phil Homewood <pdh@bne.snapgear.com>
fe3d6ef70f
James E. Housley (jeh) · 2.4.4p4,1
Upgrade to 2.4.4p4
3e0041780c
James E. Housley (jeh) · 2.4.4p2,1
Update to version 2.4.4p2.  Base loosely on patches submitted by Jun Kuriyama
c97cd039b3
Ade Lovett (ade) · 2.4.4_7,1
Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

	USE_LIBTOOL=YES		->	USE_LIBTOOL_VER=13
	USE_AUTOCONF=YES	->	USE_AUTOCONF_VER=213
	USE_AUTOMAKE=YES	->	USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
3f651573ad