Reflect databases/db3's shlib version bump from 2 to 3.dd8fc61f89
cyrus-sasl -- Fix off by one errorentered 2022-02-28
Port details
security/cyrus-sasl2 2.1.28_6
RFC 2222 SASL (Simple Authentication and Security Layer)
Port info
- Maintainer
- ume@FreeBSD.org
- Packages
- latest: 2.1.28_6
- Upstream
- up to date
- Last update
- to 2.1.28_6 · aac661e18b
- Quarterly
- 2026Q4: 2.1.28_6
- WWW
- https://www.cyrusimap.org/sasl/
- Links
- cgit · VuXML
Install
- Package
# pkg install cyrus-saslinstalls 2.1.28_6 fromlatest; fromquarterly(2026Q4) 2.1.28_6- Port
# cd /usr/ports/security/cyrus-sasl2 && make install clean# make -C /usr/ports/security/cyrus-sasl2 config # change options first
- Size
- 1.0 MiB download · 8.2 MiB installed
- Depends on
- nothing
- License
- BSD4CLAUSE
- Options
- 14 of 21 on in the package: ANONYMOUS AUTHDAEMOND BDB1 CRAM DIGEST DOCS LMDB0 LOGIN NTLM OBSOLETE_CRAM_ATTR OBSOLETE_DIGEST_ATTR OTP PLAIN SCRAM
Show the 7 options that are off
ALWAYSTRUE BDB GDBM KEEP_DB_OPEN LMDB OPIE SASLDB_IN_VAR - pkg-message
Shown after installing
You can use sasldb2 for authentication, to add users use: saslpasswd2 -c username If you want to enable SMTP AUTH with the system Sendmail, read Sendmail.README NOTE: This port has been compiled with a default pwcheck_method of auxprop. If you want to authenticate your user by /etc/passwd, PAM or LDAP, install ports/security/cyrus-sasl2-saslauthd and set sasl_pwcheck_method to saslauthd after installing the Cyrus-IMAPd 2.X port. You should also check the /usr/local/lib/sasl2/*.conf files for the correct pwcheck_method. If you want to use GSSAPI mechanism, install ports/security/cyrus-sasl2-gssapi. If you want to use SRP mechanism, install ports/security/cyrus-sasl2-srp. If you want to use LDAP auxprop plugin, install ports/security/cyrus-sasl2-ldapdb.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.1.28_6 | 2.1.28_6 | – |
| FreeBSD 14 | 2.1.28_6 | 2.1.28_6 | 2.1.28_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 2.1.28_6.Fixed (5)
Show 5 fixed
VuXML entries whose affected range the packaged version has left.
cyrus-sasl -- buffer overflow vulnerabilityentered 2009-05-15
cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Serviceentered 2006-04-22
cyrus-sasl -- potential buffer overflow in DIGEST-MD5 pluginentered 2004-10-12
no CVE referenced
cyrus-sasl -- dynamic library loading and set-user-ID applicationsentered 2004-10-08
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (282)
Cosmetic change only: make the MAN3 section fit an 80 column screen.0767189284
Fix the DB3 support. DB3's shlib version is now at 2.b57f932896
Switch from mysql322-{client,server} to mysql323-{client,server}.
mysql323-client installs libmysqlclient.so.10 (instead of
libmysqlclient.so.6).
mysql323-{client,server} are production quality, now (according to
MySQL AB at least).88d74bc517Massive style enforcement - use ^I instead of spaces for variables identation.2b1a883dc4
Goodbye, YEAR2000. Hello, 2001. Approved by: asami60f2b6b7a8
Use mktemp(1) to create a temporary file instead of using a short guessable filename during configuration. Approved by: Maintainerc57b8d55b9
Update Sendmail.README with instructions on how to enable the GroupReadableSASLFile option for DONT_BLAME_SENDMAIL. PR: 23149 Submitted by: maintainer2fca6090bb
- Correct misspelling (PGK_PREFIX -> PKG_PREFIX) in pkg-install - Add support for Heimdal Kerberos V port PR: 22894 Submitted by: MAINTAINEReebfde9690
PostFix requires 770 permissons on the /var/pwcheck directory. PR: 22490 Submitted by: Scot W. Hetzel <hetzels@westbend.net> MAINTAINER5a9d20369a
New file PR: 22462036ea866d5
- Change /var/pwcheck permissions so Postfix can use pwcheck for SASL Authentication. - Update MySQL & LDAP Authentication Methods - Correct bento warning for extra file (Sendmail.conf). - Correct mysql detection code in configure.sasl, and use LIB_DEPENDS for db3. PR: 22462 Submitted by: Scot W. Hetzel <hetzels@westbend.net> MAINTAINERa4303046f0
Missing /SASL at the end of the path to install Sendmail.README Submitted by: bentoaeaaf7bdbc
The last commit should have bumped PORTREVISION504cffc4b9
autodetected DB3, but fails to find includes PR: 21411 Submitted by: Scot W. Hetzel <hetzels@westbend.net> MAINTAINER94124a586b
Change PKGDIR from pkg/ to . Also fix places where ${PKGDIR} is spelled out (many of which are ${PKGDIR}/MESSAGE -> ${PKGMESSAGE} type fixes that shouldn't have been necessary) and the string "/pkg/" appear.7acef1cd7aUpdate all ports using OpenSSL and RSA to work without rsaref since it is no longer required. Apologies to the various maintainers whom I did not yet hear back from, but the ports freeze is coming up in a few hours and I will be verifying all of these ports on a 4.1 machine myself to catch any problems.e088a4f458
Update the sendmail build information in light of the new SENDMAIL_* make.conf flags. Approved by: maintainer, adec9b4da9692
Cyrus-SASL 1.5.24 sources changed on Aug 15th -- changed a hard coded value to a variable. Kerberos IV detection fails due to double check on krb_mk_priv (with/without com_err), used cached value from first check for krb_mk_priv. Added addtional pwcheck methods (MySQL & LDAP Authentication). PR: 21383 Submitted by: maintainer636d1ebd70
Update to 1.5.24 PR: ports/20376 Submitted by: Dmitry S. Sivachenko <dima@Chg.RU> Approved by: Scot W. Hetzel <hetzels@westbend.net> (maintainer)7bedeea431
Move the stragler's www.freebsd.org/~user distfiles to the offical MASTER_SITE_LOCAL site.1228d352ee
Rename INSTALLS_SHLIBS to INSTALLS_SHLIB. (There was a typo in the previous commit message to bsd.port.mk, which said INSTALL_SHLIBS. Boo.) Line up the rhs of variable assignments nicely. Remove a couple of extra whitespaces while I'm here. Suggested by: sobomaxffb21b5654
Final round of the INSTALLS_SHLIBS=yes conversion. Few remaining ports with ldconfig in PLIST need personal consideration.5178b48938
Update to 1.5.21. Fix detection of kerberos4. (Now support for kerberos4 is always build if /usr/lib/libkrb.a exists) Make use of PLIST_SUB. PR: ports/19187 Submitted by: Maintainerf3e3e84330
Correct whitespace introduced during PORTNAME conversion and portlint4cf4ab0a2f
Update with the new PORTNAME/PORTVERSION variables3df86a88a9
Fix build error by adding ${OPENSSLINC}/openssl to the include path.
Submitted by: Jim Bloom <bloom@acm.org>d7905faa33USE_OPENSSL Submitted by: Jim Bloom <bloom@acm.org>058359db3f
Change all www.freebsd.org/~user references to people.FreeBSD.org/~user, as the days of the former are numbered. Reviewed by: asami02c5b6c7c6
Update to version 1.5.15. PR: 16130 Submitted by: maintainerb901a9df67
Use OpenSSL instaed of librc4 so this port's package can be exported. Also incorporate Garrett Wollman's kerberos fixes. PR: 15732 Submitted by: maintaineread323453d
Adding cyrus-sasl version 1.5.13. An RFC 2222 SASL (Simple Authentication and Security Layer). PR: 14619 Submitted by: Scot W. Hetzel <hetzels@westbend.net>54ea5fa715