Vulnerable: version 3.8.6nb2 is affected by 6 known vulnerabilities. See below.
mail/cyrus-imapd38 3.8.6nb2 NetBSD
Cyrus IMAP server
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
090f95b3d8- License
- original-bsd
- Categories
- Package size
- 1532.3 KiB, 11353.4 KiB installed
Description
IMAP (Internet Message Access Protocol) is an Internet standards-track protocol for accessing messages (mail, bboards, news, etc). The Cyrus IMAP server differs from other IMAP server implementations in that it is generally intended to be run on "sealed" servers, where normal users are not permitted to log in. The mailbox database is stored in parts of the filesystem that are private to the Cyrus IMAP system. All user access to mail is through the IMAP, POP3, or KPOP protocols.
In the other systems
The newest version among them is 3.13.7, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | mail/cyrus-imapd38 | 3.8.6nb2 behind since 2026-07-04 | 6 known | - | [email protected] | 2026-07-26 |
| FreeBSD | mail/cyrus-imapd38 | 3.8.8 behind since 2026-07-04 | none known | - | [email protected] | 2026-09-09 |
| OpenBSD | mail/cyrus-imapd by name | 3.13.7 newest | no data | - | Antoine Jacoutot <[email protected]> | 2026-09-09 |
| HardenedBSD | mail/cyrus-imapd38 | 3.8.8 behind since 2026-07-04 | no data | - | [email protected] | - |
| GhostBSD | mail/cyrus-imapd38 | 3.8.8 behind since 2026-07-04 | no data | - | [email protected] | - |
Install
Binary package:
pkgin install cyrus-imapd
From pkgsrc:
cd /usr/pkgsrc/mail/cyrus-imapd38 && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 3.8.6nb2 |
| NetBSD 10.1 aarch64 | 3.8.6nb2 |
| SmartOS / illumos x86_64 | - |
| macOS 15 arm64 | - |
Dependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 8
Required by 1
Known vulnerabilities 6
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
- cyrus-imapd: remote-code-execution
1 NetBSD ports depend on it, directly or through others, and may carry the vulnerable code. The ports that need it