Move PLIST_FILES for plugins into cyrus-sasl2/Makefile.common.342be81f93
cyrus-sasl -- Fix off by one errorentered 2022-02-28
Port details
security/cyrus-sasl2 2.1.28_6
RFC 2222 SASL (Simple Authentication and Security Layer)
Port info
- Maintainer
- ume@FreeBSD.org
- Packages
- latest: 2.1.28_6
- Upstream
- up to date
- Last update
- to 2.1.28_6 · aac661e18b
- Quarterly
- 2026Q4: 2.1.28_6
- WWW
- https://www.cyrusimap.org/sasl/
- Links
- cgit · VuXML
Install
- Package
# pkg install cyrus-saslinstalls 2.1.28_6 fromlatest; fromquarterly(2026Q4) 2.1.28_6- Port
# cd /usr/ports/security/cyrus-sasl2 && make install clean# make -C /usr/ports/security/cyrus-sasl2 config # change options first
- Size
- 1.0 MiB download · 8.2 MiB installed
- Depends on
- nothing
- License
- BSD4CLAUSE
- Options
- 14 of 21 on in the package: ANONYMOUS AUTHDAEMOND BDB1 CRAM DIGEST DOCS LMDB0 LOGIN NTLM OBSOLETE_CRAM_ATTR OBSOLETE_DIGEST_ATTR OTP PLAIN SCRAM
Show the 7 options that are off
ALWAYSTRUE BDB GDBM KEEP_DB_OPEN LMDB OPIE SASLDB_IN_VAR - pkg-message
Shown after installing
You can use sasldb2 for authentication, to add users use: saslpasswd2 -c username If you want to enable SMTP AUTH with the system Sendmail, read Sendmail.README NOTE: This port has been compiled with a default pwcheck_method of auxprop. If you want to authenticate your user by /etc/passwd, PAM or LDAP, install ports/security/cyrus-sasl2-saslauthd and set sasl_pwcheck_method to saslauthd after installing the Cyrus-IMAPd 2.X port. You should also check the /usr/local/lib/sasl2/*.conf files for the correct pwcheck_method. If you want to use GSSAPI mechanism, install ports/security/cyrus-sasl2-gssapi. If you want to use SRP mechanism, install ports/security/cyrus-sasl2-srp. If you want to use LDAP auxprop plugin, install ports/security/cyrus-sasl2-ldapdb.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2.1.28_6.Fixed (5)
Show 5 fixed
VuXML entries whose affected range the packaged version has left.
cyrus-sasl -- buffer overflow vulnerabilityentered 2009-05-15
cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Serviceentered 2006-04-22
cyrus-sasl -- potential buffer overflow in DIGEST-MD5 pluginentered 2004-10-12
no CVE referenced
cyrus-sasl -- dynamic library loading and set-user-ID applicationsentered 2004-10-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (282)
Move the common part of the cyrus-sasl2 separated ports into Makefile.common, to make further maintenance easier.90e622d893
Revert r409585 to avoid dependency loop. I've completely forgot this issue. PR: 207512629168f305
OPTIONSfy ANONYMOUS authentication. On by default.6d181df987
Add OPTIONS for the separeted cyrus-sasl2 ports.718dd9ecd9
Add Cyrus SASL SRP authentication plugin. Requested by: Kyle Amon <amonk__at__backwatcher.com>c0f7910237
Use OPTIONS helper.01d64fe98c
r398691 placed the patch in the wrong directory, where it had no effect. Move it to the master port and bump the subport again. Reviewed by: ume@b43a2bc820
Backout r398328 and r398370, they break packages depending on them. With hat: portmgr MFH: 2015Q4 Sponsored by: Absolight, The FreeBSD Foundation7f5ef38c3f
Use SUB_FILES.f571a16345
Fix DOCSDIR.d4d22ea900
Sync package name with origin. PR: 202756d2c500d787
Add CPE information.d996228059
fix option of pw. Spotted by: Sean Eric Fagan <sef__at__Kithrup.COM>c1041567fb
Switch to USES=pgsql1e94b6fb2f
Simplify plistf972be4eb9
databases/sqlite2: - Convert to USES=libtool and bump dependent portsed98d435ba
Rename all patches that contain '::' as a path separator, and use '__' instead.08a006d08a
Bump more ports that depend on libsqlite3.so: - ports that set USE_SQLITE with the *_USE option helper - ports that depend on libsqlite3 indirectly as reported by pkg rquery Approved by: portmgr (implicit)ec94e4d5eb
- Keep .la files for now and delete a libtool patch. [1] - Replace a Makefile.in patch with USES=pathfix. Reported by: Willy Offermans <Willy@Offermans.Rompen.nl> [1]e4fcc8d7e2
A postscript was added to pkg-messase so that those who need them for existence of cyrus-sasl2-gssapi and cyrus-sasl2-ldapdb might notice. Spotted by: zif8c08fe340
- Use USES=libtool - Add one more MASTER_SITE - Add DOCS to OPTIONS_DEFINE6b0e583dfc
Fix build with enabling SQLITE on recent 10-STABLE and later. Spotted by: Marc Fournier <scrappy__at__hub.org>0e27ad08e5
Make libsasl2.pc usable. Spotted by: davidec91636cecb
SASL GSSAPI authentication plugin is divided into port different from cyrus-sasl2. Spotted by: Erick Turnquist <jhujhiti__at__adjectivism.org>, Scot Hetzel <swhetzel__at__gmail.com>64249e8f85
Strip shared library.03458237af
use opt_USE knob. Spotted by: sunpoetac566968aa
enable stage.85f83d7fd4
- use modern OPTIONS helper. - remove LATEST_LINK as this port has no package name collision.1213dbb0bc
- Try to unbreak parallel (-jX) builds - Improve knobs sort order within Makefile Reported by: crees, marino Approved by: ume (maintainer timeout, 3 weeks)27f024e3d5
Add NO_STAGE all over the place in preparation for the staging support (cat: security)a65ed2e51b
Mark security/cyrus-sasl2 MAKE_JOBS_UNSAFE. PR: ports/181626 Submitted by: amdmi3a0cb745994
- Remove MAKE_JOBS_SAFE variable Approved by: portmgr (bdrewery)d4041784dc
- Add http mirror in case FTP is not available Approved by: portmgr (implicit)20a7afc2fa
Don't search lib32 on FreeBSD/i386.e17b4f7b57
Use proper krb5-config when using HEIMDAL in ports.b63862b5e7
When building with security/krb5 (specifying KRB5_HOME), make sure to link mit-krb5 libs.7e9e4ddc3a
Mark cyrus-sasl2 as MAKE_JOBS_SAFE. Submitted by: Kevin Zheng <kevinz5000__at__gmail.com>9e797d382c
Add upstream commit to define size_t in sasl.h. PR: ports/174379, ports/174692 Submitted by: rakuco Obtained from: http://git.cyrusimap.org/cyrus-sasl/commit/include/sasl.h?id=67a188693796a14e3a76ac603104807fbbfddfc4292403246c
- Use OPTIONS_RADIO and OPTIONS_GROUP. - Remove useless DEV_URANDOM option. [1] Spotted by: des[1]7c78d8848e
Commit the patch that was forgotten when my previous commit. Pointy hat to: umec45d2ef830
Update cyrus-sasl2 to 2.1.26. This bumps shlib version of libsasl2.dda3fab6a5
Convert to use new OPTIONS framework.de6c53feba
Fix broken get_fqhostname() logic. Without that fix mail/mutt-devel compiled with WITH_MUTT_CYRUS_SASL2 option is not able to connect to IMAPS mailbox. PR: 161890 Submitted by: novel (myself) Approved by: maintainer timeout (more than 4 months) Obtained from: https://bugzilla.cyrusimap.org/show_bug.cgi?id=3589 Feature safe: yesf2a5ffc75c
Fix GSSAPI client crash, NULL ptr dereference. Submitted by: Phil Pennock <cyrus-sasl-phil__at__spodhuis.org> Obtained from: http://lists.andrew.cmu.edu/pipermail/cyrus-sasl/2011-October/002358.htmlee7eba9352
Update to 2.1.25.0f58d58a02
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav6f6fbe4bdfTry to fix GSSAPI when using heimdal from ports. Submitted by: Graham Todd <gtodd__at__bellanet.org> Feature safe: yes1c2c5282c5
Backout previous commit. Unfortunately, it broke GSSAPI when using heimdal in base. I have no idea how to detect whether heimdal is in base or from ports, now. Feature safe: yescba09ab3e5
* Fix GSSAPI when using heimdal from ports PR: 152071 Submitted by: Joerg Pulz <Joerg.Pulz@frm2.tum.de> Approved by: maintainer timeout Feature safe: yesda3e156fec