Sync to new bsd.autotools.mk4a8684e352
cyrus-sasl -- Fix off by one errorentered 2022-02-28
Port details
security/cyrus-sasl2 2.1.28_6
RFC 2222 SASL (Simple Authentication and Security Layer)
Port info
- Maintainer
- ume@FreeBSD.org
- Packages
- latest: 2.1.28_6
- Upstream
- up to date
- Last update
- to 2.1.28_6 · aac661e18b
- Quarterly
- 2026Q4: 2.1.28_6
- WWW
- https://www.cyrusimap.org/sasl/
- Links
- cgit · VuXML
Install
- Package
# pkg install cyrus-saslinstalls 2.1.28_6 fromlatest; fromquarterly(2026Q4) 2.1.28_6- Port
# cd /usr/ports/security/cyrus-sasl2 && make install clean# make -C /usr/ports/security/cyrus-sasl2 config # change options first
- Size
- 1.0 MiB download · 8.2 MiB installed
- Depends on
- nothing
- License
- BSD4CLAUSE
- Options
- 14 of 21 on in the package: ANONYMOUS AUTHDAEMOND BDB1 CRAM DIGEST DOCS LMDB0 LOGIN NTLM OBSOLETE_CRAM_ATTR OBSOLETE_DIGEST_ATTR OTP PLAIN SCRAM
Show the 7 options that are off
ALWAYSTRUE BDB GDBM KEEP_DB_OPEN LMDB OPIE SASLDB_IN_VAR - pkg-message
Shown after installing
You can use sasldb2 for authentication, to add users use: saslpasswd2 -c username If you want to enable SMTP AUTH with the system Sendmail, read Sendmail.README NOTE: This port has been compiled with a default pwcheck_method of auxprop. If you want to authenticate your user by /etc/passwd, PAM or LDAP, install ports/security/cyrus-sasl2-saslauthd and set sasl_pwcheck_method to saslauthd after installing the Cyrus-IMAPd 2.X port. You should also check the /usr/local/lib/sasl2/*.conf files for the correct pwcheck_method. If you want to use GSSAPI mechanism, install ports/security/cyrus-sasl2-gssapi. If you want to use SRP mechanism, install ports/security/cyrus-sasl2-srp. If you want to use LDAP auxprop plugin, install ports/security/cyrus-sasl2-ldapdb.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2.1.28_6.Fixed (5)
Show 5 fixed
VuXML entries whose affected range the packaged version has left.
cyrus-sasl -- buffer overflow vulnerabilityentered 2009-05-15
cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Serviceentered 2006-04-22
cyrus-sasl -- potential buffer overflow in DIGEST-MD5 pluginentered 2004-10-12
no CVE referenced
cyrus-sasl -- dynamic library loading and set-user-ID applicationsentered 2004-10-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (282)
- Remove KERBEROS4 option which depends on a removed port (security/krb4) - Use dirrmtry on PREFIX/lib/sasl2 where configurations may stay - Remove MD5 in distinfo PR: ports/152261 Submitted by: sunpoetd6b31373b0
Make it buildable with db50.cad2b8b876
Fix compilation with gcc44. It seems there is this fix in cyrus-sasl-2.1.24rc1. PR: 132573 Submitted by: Anonymous <swell.k__at__gmail.com> Reviewed by: OISHI Masakuni <yamasa__at__bsdhouse.org>eeb148cea6
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr789d75c728
Update to 2.1.23. Security: http://www.kb.cert.org/vuls/id/238019a9dd98ab55
Be able to install as non-root. PR: ports/133791 Submitted by: jhb880508884e
- Remove conditional checks for FreeBSD 5.x and olderb2a96c6df1
Change authdaemond_path from /dev/null to /var/run/authdaemond/socket. Though, authdaemond_path could be set by the sasl2 config file, it should be good to have its default value for ports/security/courier-authlib. PR: ports/95102, ports/122234 Submitted by: Artis Caune <Artis.Caune__at__latnet.lv>a6defecf2c
- Install saslauthd.mdoc to ${PREFIX}/man/man8/saslauthd.8. - Use ${BDB_LIB_DIR}.
PR: ports/127809
Submitted by: "Scot W. Hetzel" <swhetzel__at__gmail.com>813ceb007cOops, forgot to commit the fix3b38ad4107
- Fix build on -HEAD - Bump PORTREVISIO Approved by: maintainer timeoutcf862843c1
- Use OPTIONS. - Obey the default BDB version defined in bsd.database.mk.a60962f145
Allow to build with db45 and db46 as well.80f4aee1b7
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script supports them. This is determined by running ``configure --help'' in do-configure target and set the shell variable _LATE_CONFIGURE_ARGS which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - PR: ports/111470 Approved by: portmgr Discussed with: stas (Mk/*), gerald (info related stuffs) Tested by: pointyhat exp runf935a609c5
- Fix build on amd64 by using -fPIC PR: ports/108697 Submitted by: Gardner Bell <gbell72@rogers.com> Approved by: ume (maintainer timeout, since 2 February 2007)b5f5637f4a
Use libtool port instead of included version to avoid objformat a.out botchae994c8ea8
make it compilable with gcc 4.1. Reported by: pointyhat via krisbdfd2cf4bb
Change the MASTER_SITES entries from ftp://ftp.hanse.de/sites/transit/mirror/ to http://www.transit.hanse.de/mirror/ Requested by: Stefan Bethke <stb__at__lassitu.de>098bd5bc3a
krb5 1.5.1 won't build .a files by default, just .so files. Submitted by: Paul Vixie <paul__at__vix.com>b724fafd67
s,INSTALLS_SHLIB,USE_LDCONFIG,g26a1993ffe
Correct pathname in warning message. Reported by: nork00e1ab2282
Update to 2.1.22.15f9163193
Give sensible sentences for IGNORE. Requested by: kris7863fd84d3
Replace BROKEN with IGNORE.a73ece0305
Enable support for db-4.4.c6dd85752c
The Project Cyrus web site is migrated to a new server.8408ec8077
change /var/state/saslauthd to /var/run/saslauthd as respect hier(7). PR: ports/90810 Submitted by: Artis Caune <Artis.Caune__at__latnet.lv>4de201a19a
activate use of USE_SQLITE.f3cdde4e28
- use USB_BDB. - add SHA256.816c5ada81
install missed components.html document. PR: ports/88596 Submitted by: skv196ab78cdb
make security/cyrus-sasl2-ldapdb buildable with OpenLDAP 2.3. PR: ports/88324 Submitted by: skv994f87828f
make it compilable with OpenSSL 0.9.8. PR: ports/86452 Submitted by: Dirk Meyer <dirk.meyer__at__dinoex.sub.org>c9540832a2
Update to 2.1.21. LDAPDB auxprop plugin was added since this version. Unfortunately, we cannot simply enable it in ports tree to avoid dependency loop with OpenLDAP port. So, I'll add separete port for it later.3254625489
fix dependency. don't forget `+'.0e67d7c1ed
backout use of USE_INC_LIBTOOL_VER. libtool13 is marked as DEPRECATED. libtool15 is incompatible, and I couldn't find how to build and install static libs by libtool15. Suggensted by: Angelo Turetta <aturetta@commit.it>acd5ef69f9
simplify.08679fc01d
use USE_INC_LIBTOOL_VER.e3cc8a90f2
Allow to use Berkeley DB 4.3. PR: ports/76154 Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>8cac5725b5
Split the postgresql ports into a server and a client part. All ports depending on postgresql shall use the USE_PGSQL=yes knob defined in Mk/bsd.ports.mk. Bumping portrevisions where needed. PR: 75344 Approved by: portmgr@ (kris), ade & sean (mentors)34fa6c853e
Clean up SQLite and related ports. o Move databases/sqlite to databases/sqlite2. o Fix dependency on databases/sqlite. o Update sqlite2 to 2.8.15. o Bump PORTREVISION, accordingly. Approved by: portmgr, maintainers of sqlite and related ports617938836d
remove needless definition.c306c511b4
cyrus-sasl2-saslauthd couldn't be built with system OpenSSL and BDB42. PR: ports/74463 Submitted by: NIIMI Satoshi <sa2c@sa2c.net>78fe274d6c
Fix build with gssapi and krb5 PR: ports/74321 Submitted by: Florian Kraft <lra.hassberge@gmx.de>88bbd748e9
warn to create sasldb2 by yourself in BATCH mode. Suggested by: matusitad7b2815e0d
Update to 2.1.20.
* Fixes to cram plugin to avoid attempting to canonify uninitialized data.
* NTLM portability fixes.
* Avoid potential attack using SASL_PATH when sasl is used in a setuid
environment.
* A trivial number of small bugfixes.718daad6ebadd WITH_AUTHDAEMON option to allow use of courier authdaemond. PR: ports/72093 Submitted by: Marcin Gryszkalis6675e618e3
fix http://vuxml.freebsd.org/92268205-1947-11d9-bc4a-000c41e2cdad.html Reported by: nectar Approved by: portmgr (krion) Obtained from: https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/lib/common.c#rev1.104adeb789b91
Update to 2.1.19.08de8a9c7e
correct the path to match the path where the HTML docs are installed. PR: ports/67836 Submitted by: Linh Pham <question+freebsdpr@closedsrc.org>53ea9fc8f1