mandir should follow MANPREFIX. Requested by: Tomki <tomki@alink.net>1ba1a158a8
cyrus-sasl -- Fix off by one errorentered 2022-02-28
Port details
security/cyrus-sasl2 2.1.28_6
RFC 2222 SASL (Simple Authentication and Security Layer)
Port info
- Maintainer
- ume@FreeBSD.org
- Packages
- latest: 2.1.28_6
- Upstream
- up to date
- Last update
- to 2.1.28_6 · aac661e18b
- Quarterly
- 2026Q4: 2.1.28_6
- WWW
- https://www.cyrusimap.org/sasl/
- Links
- cgit · VuXML
Install
- Package
# pkg install cyrus-saslinstalls 2.1.28_6 fromlatest; fromquarterly(2026Q4) 2.1.28_6- Port
# cd /usr/ports/security/cyrus-sasl2 && make install clean# make -C /usr/ports/security/cyrus-sasl2 config # change options first
- Size
- 1.0 MiB download · 8.2 MiB installed
- Depends on
- nothing
- License
- BSD4CLAUSE
- Options
- 14 of 21 on in the package: ANONYMOUS AUTHDAEMOND BDB1 CRAM DIGEST DOCS LMDB0 LOGIN NTLM OBSOLETE_CRAM_ATTR OBSOLETE_DIGEST_ATTR OTP PLAIN SCRAM
Show the 7 options that are off
ALWAYSTRUE BDB GDBM KEEP_DB_OPEN LMDB OPIE SASLDB_IN_VAR - pkg-message
Shown after installing
You can use sasldb2 for authentication, to add users use: saslpasswd2 -c username If you want to enable SMTP AUTH with the system Sendmail, read Sendmail.README NOTE: This port has been compiled with a default pwcheck_method of auxprop. If you want to authenticate your user by /etc/passwd, PAM or LDAP, install ports/security/cyrus-sasl2-saslauthd and set sasl_pwcheck_method to saslauthd after installing the Cyrus-IMAPd 2.X port. You should also check the /usr/local/lib/sasl2/*.conf files for the correct pwcheck_method. If you want to use GSSAPI mechanism, install ports/security/cyrus-sasl2-gssapi. If you want to use SRP mechanism, install ports/security/cyrus-sasl2-srp. If you want to use LDAP auxprop plugin, install ports/security/cyrus-sasl2-ldapdb.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2.1.28_6.Fixed (5)
Show 5 fixed
VuXML entries whose affected range the packaged version has left.
cyrus-sasl -- buffer overflow vulnerabilityentered 2009-05-15
cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Serviceentered 2006-04-22
cyrus-sasl -- potential buffer overflow in DIGEST-MD5 pluginentered 2004-10-12
no CVE referenced
cyrus-sasl -- dynamic library loading and set-user-ID applicationsentered 2004-10-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (282)
Add WITHOUT_KERBEROS option to prevent cyrus-sasl2 from enabling Kerberos even if libkrb is installed. Requested by: Troy Dixler <troy@twisted.net>668f42d804
Point dependencies on net/openldap2 to net/openldap20e53dff475f
De-pkg-comment.8c22c15b1c
- Update to 2.1.12. - Fix installation of saslauthd.8. PR: ports/48162 Submitted by: Paulius Bulotas <paulius@kaktusas.org>c4b8123b60
Update to 2.1.11.7cf5673224
Add CYRUS_USER and CYRUS_GROUP options to be able to configure psuedo user for cyrus. Requested by: Cyrus Anderson Yunker <cayunker@unity.ncsu.edu>fda290ce5c
fix package building. Reported by: bento via krisf5fae5654d
Add WITH_MYSQL option. Requested by: Przemyslaw Ciesielski <pck@blue.pl>438f7f64a5
Add WITHOUT_CRAM and WITHOUT_DIGEST to don't build cram and digest authentication. Submitted by: Dan Larsson <dl@tyfon.net>7c9bf13b3d
Update to 2.1.10. This version corrects a number of DIGEST-MD5 interoperability issues, as well as corrects some potential buffer overflows. It is recommended that all sites using a 2.x release upgrade to 2.1.10. Approved by: portmgr0f9e559736
- Add WITH_LDAP option which includes OpenLDAP2 support into saslauthd(8). - Install saslauthd(8) related docs. OpenLDAP2 support is described in LDAP_SASLAUTHD.23d4eded05
Update to 2.1.9.c4ed92e069
Update to 2.1.8.b7c02cfa39
Correct path of /var/state. Submitted by: Ayumu Kato <akato@sysrdc.ns-sol.co.jp>041cc3f572
SASLv2 support of Sendmail is started with 8.12.4. PR: ports/43719 Submitted by: Scot W. Hetzel <hetzels@westbend.net>4622622972
fix plist in case of WITHOUT_OTP.d50aed1a93
Add option WITHOUT_OTP which disable OTP authentication. Requested by: Marc G. Fournier <scrappy@hub.org>4e4242467c
Fix typo. Sendmail.conf should be in lib/sasl2.480d566d08
PR: ports/41599 Submitted by: Sean Chittenden <sean@chittenden.org> Don't use `install -d' for the version of FreeBSD that didn't have it.cfd26d8c64
Add description about sendmail with SASLv2.895b4cb756
We don't need automake. Reported by: Jason Mealins <jason_mealins@bigfix.com>e9c163624b
BerkeleyDB cleanup - stage 2 Update databases/db3 to 3.3.11, and fix the few ports that need sorting after the shlib version update, and a slight API change from 3.2.x->3.3.x76d6ac6122
load plugins from plugin directry explicitly.0d630d5a99
Update to 2.1.7.c24c681470
Correct installation of docs.cde3dbcf90
Add cyrus-sasl-2.1.6 after repo. copy.eb3a008899
moving saslv1 includes files to make it easier to add saslv2 PR: ports/40288 Submitted by: Mathieu Arnold <m@absolight.net> Approved by: knub211a1e6c4
- Chase checksum for sasl-1.5.27-ldap-ssl-filter-mysql-patch4.tgz author fixed bug in patch but didn't increment version. - Fix problem when openldap v1 is selected. - Bump PORTREVISION PR: ports/39800 Submitted by: maintainer6803492f67
fix configure on -current update Sendmail.README for sendmail 8.10-8.12 PR: 38646 Submitted by: maintainercbe827fe7c
Do not add a shell to cyrus user. PR: 38434 Submitted by: maintainer8445fae9d3
Fix for DB3 & KRB4 PR: 38363 Submitted by: maintainerfe250dd90d
new PORTREVISION, using newer patchfile minor Update of the Readme PR: 37607,37913 Submitted by: hetzels@westbend.netcf5b40d956
Remove defunct Sourceforge site. PR: 38100 Submitted by: Alan Batieb795228956
Add USE_SUBMAKE, where it might be necessary.62f2687e21
Add patch to prevent from breaking if KRB5_HOME / HEIMDAL_HOME are defined. PR: 34561 Submitted by: maintainerf158a7cd19
Fix placement of .include <bsd.port.pre.mk> which I screwed up in the last commit. Submitted by: maintainer01aebcd262
Fix plist and dont use -w flag with fmt on older releases. PR: 34541 Submitted by: maintaineraf571993d8
Use ${ECHO_CMD} instead of ${ECHO} where you mean the echo command; the ECHO macro is set to "echo" by default, but it is set to "true" if make(1) is invoked with the -s option while ECHO_CMD is always set to the echo command.77f6c01edeFix build when KRB5_HOME is defined PR: 34149 Submitted by: maintainer668b77986b
Fix OpenLDAP v1 errors Allow PAM aware pwcheck daemon Add JavaSASL PR: 34068 Submitted by: maintainercfa957e244
Update to version 1.5.27 PR: 33603 Submitted by: MAINTAINER1dc48b9c06
This port requires automake 1.4 and cannot work with 1.5. Submitted by: bento 4-exp29186515da
Don't write pkg-{deinstall,install,message} to ${.CURDIR} but ${WRKDIR} instead since ${.CURDIR} can be a read-only filesystem.47adf04913refer to correct location in pkg-message correct db filename fix pkg-install script PR: 29731 Submitted by: maintainera260bf2b4f
Fix formatting string bug Remove old MASTER_SITE PR: 32555 Submitted by: alx@cii.sumy.ua Approved by: maintainer73358a5ab0
Fix automake build problem PR: 32026 Submitted by: maintainer4e674720a8
Instead of setting ${AUTOMAKE} to automake --add-missing --include-deps, set ${AUTOMAKE_ARGS} to --add-missing --include-deps.
PR: 31593
Submitted by: TOGAWA Satoshi <toga@puyo.org>8247c0e01aUSE DOCSDIR and PORTDOCS ADD IPv6 support PR: 29404 Submitted by: maintainerce0f01c8dd
Back out the db3 port update because some of these dependent ports had been broken by the incompatibility between db3.2 and db3.3. I am unconditionally bumping the PORTREVISION's to eliminate possible troubles that should not happen before the coming release. Sorry for inconvenience. I'll try to check compatibility hard before committing next time.79f86fd6ec