Vulnerable: version 2.1.28nb2 is affected by 1 known vulnerability. See below.
security/cyrus-sasl 2.1.28nb2 NetBSD
Simple Authentication and Security Layer
- System
- NetBSD
- Repository
- pkgsrc
- License
- original-bsd
- Categories
- security
- Package size
- 171.9 KiB, 814.7 KiB installed
Description
SASL is a method for adding authentication support to connection-based protocols. To use SASL, a protocol includes a command for identifying and authenticating a user to a server and for optionally negotiating protection of subsequent protocol interactions. If its use is negotiated, a security layer is inserted between the protocol and the connection.
This is the Cyrus SASL API implentation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information.
There's a mailing list for Cyrus SASL. Subscribe by sending a message to [email protected] with the body "subscribe cyrus-sasl". The mailing list is available via anonymous IMAP at imap://cyrus.andrew.cmu.edu/archive.cyrus-sasl or via the web at http://asg.web.cmu.edu/archive/mailbox.php3?mailbox=archive.cyrus-sasl.
This package does not include any mechanisms. Users will almost certainly want to install one or more of the packages security/cy2-*.
In the other systems
The newest version among them is 2.1.28, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | security/cyrus-sasl | 2.1.28nb2 newest | 1 known | - | - | - |
| FreeBSD | security/cyrus-sasl2 by name | 2.1.28_6 newest | none known | - | [email protected] | 2026-10-21 |
| OpenBSD | security/cyrus-sasl2 by name | 2.1.28p3 newest | no data | - | Antoine Jacoutot <[email protected]> | - |
| DragonFly | security/cyrus-sasl2 by name | 2.1.28_5 newest | none known | - | [email protected] | - |
| HardenedBSD | security/cyrus-sasl2 by name | 2.1.28_6 newest | no data | - | [email protected] | - |
| GhostBSD | security/cyrus-sasl2 by name | 2.1.28_6 newest | no data | - | [email protected] | - |
| OPNsense | security/cyrus-sasl2 by name | 2.1.28_5 newest | no data | - | [email protected] | - |
Install
Binary package:
pkgin install cyrus-sasl
From pkgsrc:
cd /usr/pkgsrc/security/cyrus-sasl && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 2.1.28nb2 |
| NetBSD 10.1 aarch64 | 2.1.28nb2 |
| SmartOS / illumos x86_64 | 2.1.28nb2 |
| macOS 15 arm64 | 2.1.28nb2 |
Dependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Required by 42
- databases/kldap
- databases/php-mongo
- databases/py-ldap
- devel/libkgapi
- devel/libmemcached
- devel/php-memcached
- mail/cyrus-imapd24
- mail/cyrus-imapd310
- mail/cyrus-imapd312
- mail/cyrus-imapd32
- mail/cyrus-imapd38
- mail/isync
- mail/kimap
- mail/kmailtransport
- mail/ksmtp
- mail/libetpan
- mail/mutt
- mail/neomutt
- mail/postfix
- net/gtk-vnc
- net/krdc
- security/cy2-anonymous
- security/cy2-crammd5
- security/cy2-digestmd5
- security/cy2-gssapi
- security/cy2-ldapdb
- security/cy2-login
- security/cy2-ntlm
- security/cy2-otp
- security/cy2-plain
- security/cy2-saml
- security/cy2-scram
- security/cy2-sql
- security/cyrus-sasl-oauth2-oidc
- security/lua-cyrussasl
- security/p5-Authen-SASL-Cyrus
- security/pam-saml
- sysutils/libvirt
- wip/cyrus-imapd30
- wip/cyrus-imapd34
- wip/cyrus-imapd36
- wip/multisync-ldap
Known vulnerabilities 1
93 NetBSD ports depend on it, directly or through others, and may carry the vulnerable code. The ports that need it