• https://www.cyrusimap.org/releases/ (Download)
• ftp://ftp.cyrusimap.org/cyrus-sasl/ (Download)

• db4
• gssapi
• ldap
• mysql
• pgsql
• sqlite3

• (2020-01-13) Updated to version: cyrus-sasl-2.1.27
• (2012-11-22) Updated to version: cyrus-sasl-2.1.26
• (2011-09-21) Updated to version: cyrus-sasl-2.1.25
• (2009-05-16) Updated to version: cyrus-sasl-2.1.23
• (2009-03-17) Updated to version: cyrus-sasl-2.1.22p5
• (2008-05-14) Updated to version: cyrus-sasl-2.1.22p4
• (2008-03-15) Updated to version: cyrus-sasl-2.1.22p3
• (2007-10-26) Updated to version: cyrus-sasl-2.1.22p2
• (2007-07-26) Updated to version: cyrus-sasl-2.1.22p1
• (2007-07-08) Updated to version: cyrus-sasl-2.1.22p0

Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes

Log message:
switch some master_sites and homepage lines to https. ok sthen

Log message:
Help this build with recent mariadb releases.

Log message:
Drop bogus pkgconfig file patch.
reported by Hannu Vuolasaho, thanks!

Log message:
Remove chunk now that we have support for EVP_ENCODE_CTX_new and
EVP_ENCODE_CTX_free.

Log message:
Update to cyrus-sasl-2.1.27.
This survived a bulk but only got light testing.
Getting this in early to get feedback about potential regressions.
Please *test* :-)

Log message:
Add comment.

Log message:
Add COMPILER lines to c++ ports which currently use the default. Adjust
some existing COMPILER lines with arch restrictions etc. In the usual
case this is now using "COMPILER = base-clang ports-gcc base-gcc" on
ports with c++ libraries in WANTLIB.
This is basically intended to be a noop on architectures using clang
as the system compiler, but help with other architectures where we
currently have many ports knocked out due to building with an unsuitable
compiler -
- some ports require c++11/newer so the GCC version in base that is used
on these archirtectures is too old.
- some ports have conflicts where an executable is built with one compiler
(e.g. gcc from base) but a library dependency is built with a different
one (e.g. gcc from ports), resulted in mixing incompatible libraries in the
same address space.
devel/gmp is intentionally skipped as it's on the path to building gcc -
the c++ library there is unused in ports (and not built by default upstream)
so intending to disable building gmpcxx in a future commit.

Log message:
Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d
daemon scripts and bump subpackages that contain the *.rc scripts.
discussed with and OK aja@
OK tb

Log message:
bump LIBCXX/LIBECXX/COMPILER_LIBCXX ports.

Log message:
...and those last 5, which got updated while I was creating the diff

Log message:
fix interoperability between cyrus-sasl and courier-authdaemond
committed upstream
ok aja@

Log message:
use LIBCXX

Log message:
Sync WANTLIB after heimdal update.

Log message:
sync WANTLIB (readding idn to some where I was overzealous, plus some lzma/pthread)

Log message:
Split sqlite3 support into its own FLAVOR.

Log message:
Cope with moving sqlite3 back to ports.

Log message:
--without-sqlite so that we don't pick up sqlite2 from ports.
reported by nigel@

Log message:
Unbreak getent LOGIN/PLAIN authentication: getpwnam -> getpwnam_shadow.
Fix a few time_t printf while here.

Log message:
g/c PFRAG.shared

Log message:
garbage collect CONFIGURE_SHARED

Log message:
Add a "gssapi" FLAVOR for Kerberos authentication.
While here, enable sqlite3 support unconditionally and drop the corresponding
FLAVOR.

Log message:
sync WANTLIB

Log message:
"/usr/local/lib/pkgconfig/" is part of mtree(8).
Packages should not own this dir to prevent its deletion or a warning that it
cannot be removed because it's not empty at pkg_delete(1) time.

Log message:
* Don't turn an mdoc(7) page into a cat page.  Install the source page.
* No need to explicitly recurse into saslauthd.  The build framework
does that already.
ok ajacoutot@

Log message:
Sanitize some @unexec/@extraunexec calls to rm: move them up in the
PLIST and delete everything under the @sample'd directory instead of the
directory itself to prevent a warning from pkg_delete(1) trying to
remove a non existing directory and to help preventing left-over files
and directories.

Log message:
Simplify after recent rc.subr change.
The framework is now stable and we will start documenting it (at last).

Log message:
Cope with recent rc.subr changes.

Log message:
since db/v4 has db->=4,<5 as default, no need to specify it explicitly

Log message:
new depends

Log message:
Add RCS IDs to rc scripts.

Log message:
Add rc script for saslauthd.

Log message:
USE_GROFF=Yes

Log message:
New HOMEPAGE+MASTER_SITES.

Log message:
Fix some implicit declarations.
Move to REVISION and new DEPENDS.

Log message:
these should be last BROKEN -> ERRORS
ok aja@

Log message:
Remove bad hunk; noticed by Moritz Grimm, thanks!
ok robert@

Log message:
SECURITY FIX
Resolve CVE-2009-0688:  unsafe use of sasl_encode64()
ok robert@

Log message:
- SECURITY update to cyrus-sasl-2.1.23
* lib/saslutil.c: Fixed CERT VU#238019 (make sure sasl_encode64()
always NUL terminates output or returns SASL_BUFOVER).

Log message:
fix depends

Log message:
- add sasldb and ldapdb auxprop plugins
from Pedro Almeida <palmeida at securenetworks dot pt>

Log message:
- provide @sample saslauthd.conf for saslauthd LDAP auth
- also add LDAP_SASLAUTHD doc

Log message:
db.=4 -> db.>=4  in preparation of db4 update
ok sthen@

Log message:
- add a sample Sendmail.conf-sql for Sendmail authentication (*sql FLAVORS only)
based on a bigger diff by Mike Erdely <mike at erdelynet dot com>

Log message:
- add NTLM support
from Mikolaj Kucharski <mikolaj at kucharski dot name>

Log message:
- long due update to 2.1.22
- merge the 3 PLISTs for sql related FLAVORS (sqlite, pgsql and mysql)
into one
- use a VARIABLE for the "incompatible FLAVORS" message
- post-extract -> post-configure, to ease patches updates
- fmt pkg/DESCR
"go ahead" robert@

Log message:
- fix sqlite FLAVOR lib_depends

Log message:
- clean the Makefile a bit so it is easier for me to read it
- zap $VERSION
- tweak post-install
- post-extract -> pre-configure
- add available FLAVORS to DESCR
no functionnal changes

Log message:
more base64 checksums

Log message:
- take over maintainership
- bump PKGNAME
ok jakob@ (obviously), pvalchev@

Log message:
new lib specs

Log message:
- remove unneeded MODGNU_SHARED_LIBS and related patches
- use correct ${SYSCONFDIR} in man page, fix from Antoine Jacoutot

Log message:
fix broken kerberos support

Log message:
forgot these

Log message:
SHARED_LIBS
USE_LIBTOOL where appropriate

Log message:
compile -fPIC as needed; ok jakob

Log message:
kill more libresolv; from Matthias Kilian

Log message:
update to 2.1.21; work by naddy and me

Log message:
remove blank lines which produce blank pages with nroff.
help and 'looks fine' jmc@, ok espie@

Log message:
create /var/sasl2/ in PLIST
from Antoine Jacoutot <ajacoutot at lphp.org>
maintainer timeout

Log message:
fix memory overwrite bug; patch from Marcus Redivo

Log message:
unbreak sqlite flavor.
ok naddy@

Log message:
fix plugin location instead of creating soft line from /usr/lib/sasl2
bump pkgname

Log message:
SECURITY:
libsasl, contains functions which may load dynamic libraries.
These libraries may be loaded from the path specified by the
environmental variable SASL_PATH, which in some situations may be
fully controlled by a local attacker.
Thus, if a set-user-ID application utilizes libsasl, it may be possible
for a local attacker to gain superuser privileges.

Log message:
remove bogus patch for plaintext password checking

Log message:
better and consistent LIB_DEPENDS on db; this fixes a few possible
build time failures, where the wrong version of db could be found

Log message:
SIZE

Log message:
rename sql flavour to mysql
add new flavours for pgsql and sqlite

Log message:
remove

Log message:
- Disable sqlite explicitly as it's picked up automatically by configure
script
- Add WANTLIB marker
- Bump PKGNAME
ok jakob@

Log message:
remove bogus patch for plaintext password checking

Log message:
update to Cyrus SASL 2.1.20; thanks to Ben Hooper for diffs

Log message:
fix my stupid typos: getuid -> geteuid, getgid -> getegid
reported by bluhm@genua.de, markus@; ok brad@

Log message:
fix my stupid typos: getuid -> geteuid, getgid -> getegid
reported by bluhm@genua.de, markus@; ok brad@

Log message:
specify ldap path

Log message:
fix my stupid typos: getuid -> geteuid, getgid -> getegid
reported by bluhm@genua.de, markus@

Log message:
SECURITY:
libsasl, contains functions which may load dynamic libraries.
These libraries may be loaded from the path specified by the
environmental variable SASL_PATH, which in some situations may be
fully controlled by a local attacker.
Thus, if a set-user-ID application utilizes libsasl, it may be possible
for a local attacker to gain superuser privileges.
ok brad@

Log message:
SECURITY:
libsasl, contains functions which may load dynamic libraries.
These libraries may be loaded from the path specified by the
environmental variable SASL_PATH, which in some situations may be
fully controlled by a local attacker.
Thus, if a set-user-ID application utilizes libsasl, it may be possible
for a local attacker to gain superuser privileges.
ok brad@

Log message:
SECURITY:
libsasl, contains functions which may load dynamic libraries.
These libraries may be loaded from the path specified by the
environmental variable SASL_PATH, which in some situations may be
fully controlled by a local attacker.
Thus, if a set-user-ID application utilizes libsasl, it may be possible
for a local attacker to gain superuser privileges.
ok jakob@

Log message:
regen saslauthd.8 as the distributed file is full of ESC-seqs
noticed by "Hanford, Seth" <shanford at ckure.com>
ok maintainer jakob@

Log message:
new style conflicts

Log message:
kill this fragment too.

Log message:
forgot

Log message:
new plists.
gnutls depends on lzo.

Log message:
fix up MODGNU_CONFIG_GUESS_DIRS

Log message:
NO_SHARED_LIBS always defined.

Log message:
update to cyrus-sals2 2.1.19.
Submitted by:	Ben Hooper <ben@networkinsanity.com>

Log message:
update cyrus-sasl2 2.1.18.
Submmited by Ben Hooper <ben@networkinsanity.com>
Some modifications by me, ok jakob@

Log message:
hppa has shared libs now

Log message:
add db4 FLAVOR in pkg/DESCR. Pointed out by brad@

Log message:
Oops

Log message:
- don't need to use USE_LIBTOOL
- add flavor db4
Ok'd by jakob@

Log message:
install correct libsasl2.a.
ok jakob@

Log message:
remove WWW lines

Log message:
remove krb4 hints which point to nothing now

Log message:
update to sasl2 version 2.1.13

Log message:
Fix INSTALL scripts so that the principal action is not executed
twice at install time.  Also remove yet another instance of that
action from the package list.

Log message:
fix broken gssapi; from Chris Giard

Log message:
Kerberos -SUCKS-

Log message:
add/fix RCS Ids; suggested by Jolan Luff <jolan@cryptonomicon.org>

Log message:
update to v2.1.11; from Hack Kampbjorn

Log message:
Fix man page location.

Log message:
upgrade to v2.1.10, buffer overflow fixes. patch from Hack Kampbjorn.

Log message:
upgrade to v2.1.10, buffer overflow fixes. patch from Hack Kampbjorn.

Log message:
Fix manpage location. Reported by pval@.

Log message:
Add missing libs so this links successfully with new binutils; ok jakob

Log message:
disable sample code

Log message:
update to v2.1.7