CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/cyrus-sasl2-gssapi 2.1.28

SASL GSSAPI authentication plugin

Port info

Maintainer
ume@FreeBSD.org
Packages
latest: 2.1.28
Upstream
up to date
Last update
to 2.1.28 · fb16dfecae
Quarterly
2026Q4: 2.1.28
WWW
https://www.cyrusimap.org/sasl/
Links
cgit · VuXML

Install

Package
# pkg install cyrus-sasl-gssapi
installs 2.1.28 from latest; from quarterly (2026Q4) 2.1.28
Port
# cd /usr/ports/security/cyrus-sasl2-gssapi && make install clean
# make -C /usr/ports/security/cyrus-sasl2-gssapi config  # change options first
Size
20 KiB download · 70 KiB installed
Depends on
security/cyrus-sasl2 2.1.28_6
License
BSD4CLAUSE
Options
1 of 3 on in the package: GSSAPI_BASE
Show the 2 options that are off
GSSAPI_HEIMDAL GSSAPI_MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.1.282.1.28–
FreeBSD 152.1.282.1.28–
FreeBSD 142.1.282.1.282.1.28

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.1.282.1.28–
FreeBSD 142.1.282.1.282.1.28

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.1.28.

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
291828maintainer-feedback? security/cyrus-sasl2-gssapi: GSSAPI_BASE appears broken in FreeBSD 15New2026-03-16

Commits (28)

Stefan Eßer (se) · 2.1.28
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se)
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Hajimu UMEMOTO (ume)
security/cyrus-sasl2: Update to 2.1.28.

PR:		262133
Relnotes:	https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
Security:	CVE-2019-19906, CVE-2022-24407
d29e6c0326
Hajimu UMEMOTO (ume)
security/cyrus-sasl2-gssapi: remove patch-plugins_gssapi.c

PR:		260017
Reported by:	Michael Osipov
Discussed with: hrs
MFH:		2021Q4
17b54ce763
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Hajimu UMEMOTO (ume)
- Call gss_acquire_cred() before gss_init_sec_context()   in gssapi_client_mech_step() - Fix a bug which prevented the client from retrieving   a credential from CCACHE.

These patches were already merged into upstream.

  https://github.com/cyrusimap/cyrus-sasl/pull/575
  https://github.com/cyrusimap/cyrus-sasl/pull/591

Submitted by:	hrs
bdf37d02bb
Hajimu UMEMOTO (ume)
Update to 2.1.27.
b39a664d41
Hajimu UMEMOTO (ume)
the GS2 plugin can be buildable with the MIT Kerberos as well.
d5223d4aff
Hajimu UMEMOTO (ume)
- Make SASLdb excludable. - Make SASLdb buildable with GDBM. - Make sure to disable the plugins where it is not required.
b49e7032a3
Hajimu UMEMOTO (ume)
Move PLIST_FILES for plugins into cyrus-sasl2/Makefile.common.
342be81f93
Hajimu UMEMOTO (ume)
Move the common part of the cyrus-sasl2 separated ports into Makefile.common, to make further maintenance easier.
90e622d893
Hajimu UMEMOTO (ume) · 2.1.26_7
Use gssapi related descriptions in bsd.options.desc.mk.
4bc3dd8ab6
Hajimu UMEMOTO (ume) · 2.1.26_7
Use OPTIONS helper.
01d64fe98c
Dag-Erling Smørgrav (des) · 2.1.26_7
r398691 placed the patch in the wrong directory, where it had no effect. Move it to the master port and bump the subport again.

Reviewed by:	ume@
b43a2bc820
Dag-Erling Smørgrav (des) · 2.1.26_6
Silence debugging message.

Approved by:	maintainer silence
a428eb2978
Mathieu Arnold (mat) · 2.1.26_5
Backout r398328 and r398370, they break packages depending on them.

With hat:	portmgr
MFH:		2015Q4
Sponsored by:	Absolight, The FreeBSD Foundation
7f5ef38c3f
Hajimu UMEMOTO (ume) · 2.1.26_4
Sync package name with origin.

PR:		202756
d2c500d787
Hajimu UMEMOTO (ume) · 2.1.26_3
Use Uses=heimdal,flags.
e800283245
Hajimu UMEMOTO (ume) · 2.1.26_3
Fix build after change of security/heimdal install directory.
b02dfa861d
Hajimu UMEMOTO (ume) · 2.1.26_2
Use Uses/gssapi.mk.

Submitted by:	hrs
af5b874dac
Hajimu UMEMOTO (ume) · 2.1.26_2
Since we don't use its own libtool, build arg is required to USES=libtool.

Spotted by:	antoine
31d3cfd61c
Hajimu UMEMOTO (ume) · 2.1.26_2
Include RPATH in the libs, again. It seems that USES=libtool doesn't rewrite ${LIBTOOL} in a configure script to use ${LOCALBASE}/bin/libtool like bsd.autotools.mk did. So, rewrite it explicitly for workaround.

PR:		194176
Submitted by:	jhujhiti__at__adjectivism.org
6f1768ca2b
Hajimu UMEMOTO (ume) · 2.1.26_1
Fix build with enabling HEIMDAL or MIT on recent 10-STABLE and later.
251442ce7e
Hajimu UMEMOTO (ume) · 2.1.26_1
- Use USES=libtool - Add one more MASTER_SITE - Add DOCS to OPTIONS_DEFINE
6b0e583dfc
Hajimu UMEMOTO (ume) · 2.1.26
Respect HEIMDAL_HOME / KRB5_HOME.

PR:		ports/185236
Submitted by:	Dewayne <dewayne__at__heuristicsystems.com.au> (partly)
3ca58ac2cc
Hajimu UMEMOTO (ume) · 2.1.26
Fix typo in MIT_LIB_DEPENDS.

Submitted by:	Erick Turnquist <jhujhiti__at__adjectivism.org>
af860a369a
Hajimu UMEMOTO (ume) · 2.1.26
SASL GSSAPI authentication plugin is divided into port different from cyrus-sasl2.

Spotted by:	Erick Turnquist <jhujhiti__at__adjectivism.org>,
		Scot Hetzel <swhetzel__at__gmail.com>
64249e8f85