Vulnerable: version 2.4.20nb36 is affected by 13 known vulnerabilities. See below.
mail/cyrus-imapd24 2.4.20nb36 NetBSD
Cyrus IMAP server
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
618415630a- Categories
- Package size
- 2479.7 KiB, 64285.0 KiB installed
Description
IMAP (Internet Message Access Protocol) is an Internet standards-track protocol for accessing messages (mail, bboards, news, etc). The Cyrus IMAP server differs from other IMAP server implementations in that it is generally intended to be run on "sealed" servers, where normal users are not permitted to log in. The mailbox database is stored in parts of the filesystem that are private to the Cyrus IMAP system. All user access to mail is through the IMAP, POP3, or KPOP protocols.
In the other systems
The newest version among them is 3.13.7, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | mail/cyrus-imapd24 | 2.4.20nb36 behind since 2026-07-04 | 13 known | - | [email protected] | 2026-07-16 |
| FreeBSD | mail/cyrus-imapd by name | 3.12 behind since 2026-07-04 | none known | - | [email protected] | - |
| OpenBSD | mail/cyrus-imapd by name | 3.13.7 newest | no data | - | Antoine Jacoutot <[email protected]> | 2026-09-09 |
| HardenedBSD | mail/cyrus-imapd by name | 3.12 behind since 2026-07-04 | no data | - | [email protected] | - |
| GhostBSD | mail/cyrus-imapd by name | 3.12 behind since 2026-07-04 | no data | - | [email protected] | - |
Install
Binary package:
pkgin install cyrus-imapd
From pkgsrc:
cd /usr/pkgsrc/mail/cyrus-imapd24 && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 2.4.20nb36 |
| NetBSD 10.1 aarch64 | 2.4.20nb36 |
| SmartOS / illumos x86_64 | - |
| macOS 15 arm64 | - |
Dependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 4
No port depends on this one.
Known vulnerabilities 13
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: unspecified (CVE-2015-8077)
- cyrus-imapd: unspecified (CVE-2015-8078)
- cyrus-imapd: off-by-one (CVE-2017-14230)
- cyrus-imapd: arbitrary-file-write (CVE-2019-19783)
- cyrus-imapd: access-bypass (CVE-2021-32056)
- cyrus-imapd: denial-of-service (CVE-2021-33582)
- cyrus-imapd: denial-of-service (CVE-2024-34055)