CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

sysutils/loki 2.9.2_34

Scalable, highly-available, multi-tenant log aggregation system

Port info

Maintainer
freebsd@funzi.org
Packages
latest: 2.9.2_34
Upstream
Higher version available: 3.7.9
Last update
to 2.9.2_34 · d81b7ba3c3
Quarterly
2026Q4: 2.9.2_34 · last MFH 60647eff54
WWW
https://github.com/grafana/loki
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install grafana-loki
installs 2.9.2_34 from latest; from quarterly (2026Q4) 2.9.2_34
Port
# cd /usr/ports/sysutils/loki && make install clean
Size
58 MiB download · 245 MiB installed
Depends on
nothing
License
AGPLv3
Creates
user loki, promtail, group loki, promtail
pkg-message
Shown after upgrading
Upgrading from before 2.6.1_5 changes default log level "info" to "warn".
Adjust loki_loglevel in ${ETCDIR}/rc.d/loki if needed.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.9.2_342.9.2_33–
FreeBSD 152.9.2_342.9.2_33–
FreeBSD 142.9.2_342.9.2_332.9.2_34

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.9.2_342.9.2_33–
FreeBSD 142.9.2_342.9.2_332.9.2_34

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 2.9.2_34 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-217265.32026-04-15The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ru…

VuXML only (0)

Listed in VuXML, the packaged version 2.9.2_34 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
294393maintainer-feedback? sysutils/loki: service loki stop fails to kill loki processNew2026-04-10

Commits (65)

Dmitri Goutnik (dmgk) · 2.7.0_1
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Nuno Teixeira (eduardo) · 2.7.0
sysutils/loki: Update to 2.7.0

ChangeLog:	https://github.com/grafana/loki/releases/tag/v2.7.0
PR:		267733
883574c117
Nuno Teixeira (eduardo) · 2.6.1_5
sysutils/loki: Switch log level default from "info" to "warn"

By default, the log level is set to "info", which happens to be very
verbose.
To avoid filling the log file and saving disk space, I recommend we set
the default log level to "warn".

PR:		267424
9e5e885d5a
Dmitri Goutnik (dmgk) · 2.6.1_4
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Dmitri Goutnik (dmgk) · 2.6.1_3
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 2.6.1_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.6.1_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Kurt Jaeger (pi) · 2.6.1_2
sysutils/loki: Fix runtime error with after runtime bump to go119

PR:		266041
Approved by:	maintainer
c5b27101bd
Dmitri Goutnik (dmgk) · 2.6.1_1
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Fernando Apesteguía (fernape) · 2.6.1
sysutils/loki: Update to 2.6.1

ChangeLog: https://github.com/grafana/loki/releases/tag/v2.6.1

PR:	265326
Reported by:	freebsd@funzi.org (maintainer)
c3bbfa88f0
Dmitri Goutnik (dmgk) · 2.6.0
sysutils/loki: Update to 2.6.0

- Update to 2.6.0
- Add logcli, loki-canary and promtail

Changes:	https://github.com/grafana/loki/releases/tag/v2.6.0

PR:		265295
PR:		256031
PR:		265231
a53efc77be
Dmitri Goutnik (dmgk) · 2.5.0_2
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Dmitri Goutnik (dmgk) · 2.5.0_1
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8
Bernhard Froehlich (decke) · 2.5.0
sysutils/loki: Add CPE information

Approved by:	portmgr (blanket)
5f3a0ff3b6
Dmitri Goutnik (dmgk) · 2.5.0
sysutils/loki: Add new port

Loki is a horizontally-scalable, highly-available, multi-tenant log
aggregation system inspired by Prometheus. It is designed to be very
cost effective and easy to operate. It does not index the contents of
the logs, but rather a set of labels for each log stream.

WWW: https://github.com/grafana/loki

PR:		256030
a96c988a29