BSD Ports

Vulnerable: version 3.12.1nb1 is affected by 6 known vulnerabilities. See below.

mail/cyrus-imapd312 3.12.1nb1 NetBSD

Cyrus IMAP server

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
d09a3d1347
License
original-bsd
Categories
mail
Package size
1720.0 KiB, 13130.9 KiB installed

Description

IMAP (Internet Message Access Protocol) is an Internet standards-track protocol for accessing messages (mail, bboards, news, etc). The Cyrus IMAP server differs from other IMAP server implementations in that it is generally intended to be run on "sealed" servers, where normal users are not permitted to log in. The mailbox database is stored in parts of the filesystem that are private to the Cyrus IMAP system. All user access to mail is through the IMAP, POP3, or KPOP protocols.

In the other systems

The newest version among them is 3.13.7, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
NetBSDmail/cyrus-imapd3123.12.1nb1 behind since 2026-07-046 known-[email protected]2026-10-05
FreeBSDmail/cyrus-imapd3123.12.4 behind since 2026-07-04none known-[email protected]2026-09-09
OpenBSDmail/cyrus-imapd by name3.13.7 newestno data-Antoine Jacoutot <[email protected]>2026-09-09
HardenedBSDmail/cyrus-imapd3123.12.4 behind since 2026-07-04no data-[email protected]-
GhostBSDmail/cyrus-imapd3123.12.4 behind since 2026-07-04no data-[email protected]-

Compare across BSDs

Version history 1

  1. 3.12.4 d09a3d1347

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

pkgin install cyrus-imapd

From pkgsrc:

cd /usr/pkgsrc/mail/cyrus-imapd312 && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_643.12.1nb1
NetBSD 10.1 aarch643.12.1nb1
SmartOS / illumos x86_64-
macOS 15 arm64-

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

Run dependencies 10

No port depends on this one.

Related ports

The same software or family in NetBSD: one homepage, or one name but for a version or a variant.

Known vulnerabilities 6

Commit history 3

DateCommitCreditsLog message
d09a3d1347 jnemeth cyrus-imapd312: Update to Cyrus IMAPd 3.12.4.
____________________________________________________________________________________________ Cyrus IMAP 3.12.4 Release Notes Changes since 3.12.3 Security fixes * CVE-2026-61907: JMAP snooze bypasses destination-mailbox ACL An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox. Reported by: Michael Lynch (mtlynch.io). * CVE-2026-61908: JMAP email-header blob ID out-of-bounds index An authenticated user could attempt to download a specially crafted JMAP blob ID of the form …
a41e153cd9 mef (mail/cyrus-imapd312) Fix patching issue on some environment,
See Following https://mail-index.netbsd.org/pkgsrc-users/2026/07/25/msg043234.html
618415630a wiz *: recursive bump for perl5 5.44.0