CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

sysutils/rsyslog8 8.2610.0

Syslogd supporting SQL, TCP, and TLS

Port info

Maintainer
matthew@FreeBSD.org
Packages
latest: rsyslog 8.2610.0, rsyslog-mysql 8.2610.0, rsyslog-pgsql 8.2610.0
Upstream
up to date
Last update
to 8.2610.0 · fef887c46b
Quarterly
2026Q4: rsyslog 8.2608.0_1, rsyslog-mysql 8.2608.0_1, rsyslog-pgsql 8.2608.0_1 1 unaddressed
WWW
https://www.rsyslog.com/
Links
cgit · VuXML

Install

Package
# pkg install rsyslog
# pkg install rsyslog-mysql
# pkg install rsyslog-pgsql
installs rsyslog 8.2610.0, rsyslog-mysql 8.2610.0, rsyslog-pgsql 8.2610.0 from latest; from quarterly (2026Q4) rsyslog 8.2608.0_1, rsyslog-mysql 8.2608.0_1, rsyslog-pgsql 8.2608.0_1
Port
# cd /usr/ports/sysutils/rsyslog8 && make install clean
# make -C /usr/ports/sysutils/rsyslog8 config  # change options first
Size
582 KiB download · 1.6 MiB installed
Depends on
archivers/snappy 1.3.1, devel/libestr 0.1.11_1, devel/libfastjson 1.2609.0, devel/liblogging 1.0.8, devel/protobuf-c 1.5.2, ftp/curl 8.23.0, misc/libuuid 2.42.4, security/libgcrypt 1.12.4, security/libgpg-error 1.61, textproc/libyaml 0.2.5
License
APACHE20 and GPLv3 and LGPL3
Options
2 of 18 on in the package: DOCS GCRYPT
Show the 16 options that are off
BEATS DBI DTLS ELASTIC GNUTLS GSSAPI HTTP JSONPARSE KAFKA MYSQL NORMALIZE OPENSSL PGSQL RABBITMQ RELP SNMP
pkg-message
Shown after installing
To start using rsyslogd(8), stop syslogd(8) if it is running and
add the following lines to rc.conf(5):

  syslogd_enable="NO"
  rsyslogd_enable="YES"

For best results, create a new configuration file
/usr/local/etc/rsyslog.conf rather than trying to re-use the original
/etc/syslog.conf -- the configuration file syntax has diverged over
time, and it's no longer anywhere near compatible.

The port will install an example configuration file which should
provide the same logging setup as the default /etc/syslog.conf

newsyslog(8) has the path of syslogd's pid file hardcoded. To
make it work seamlessly with rsyslog, add this:

  rsyslogd_pidfile="/var/run/syslog.pid"
Note
Size, dependencies, options and messages are those of rsyslog.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 168.2610.08.2608.0_1–
FreeBSD 158.2610.08.2608.0_1–
FreeBSD 148.2610.08.2608.0_18.2610.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 158.2608.0_18.2608.0_1–
FreeBSD 148.2608.0_18.2608.0_18.2608.0_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 8.2610.0 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-927098.12026-10-22Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexi…

VuXML only (0)

Listed in VuXML, the packaged version 8.2610.0 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (134)

Matthew Seaman (matthew) · 8.2610.0
sysutils/rsyslog8: update to 8.2610.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2610.0/ChangeLog
Reported-by:	GitHub release watch
fef887c46b
Muhammad Moinur Rahman (bofh) · 8.2608.0_1
*/*: Bump after libfastjson update

Approved by:	portmgr (blanket)

Event:          Berlin Hackathon 202609
6547ec0ffa
Matthew Seaman (matthew) · 8.2608.0
sysutils/rsyslog8: update to 8.2608.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2608.0/ChangeLog
Reported by:	GitHub release notifications
8bfcc43cb7
Matthew Seaman (matthew) · 8.2606.0
sysutils/rsyslog8: Add pgsql and mysql flavours

These new flavours enable the pre-existing PGSQL or MYSQL options so
that a package with RDBMS support is available.

PR:	297415
81b7bb901b
Matthew Seaman (matthew) · 8.2606.0
sysutils/rsyslog8: fix pkg-plist errors

Missed an update to pkg-plist in the last update.  Ooops.
8a8d5a7551
Matthew Seaman (matthew) · 8.2606.0
sysutils/rsyslog8: Upgrade to 8.2606.0

* Delete `extra-patch-sane-hostname` -- the file this was aimed at
    no longer contains any code around hostnames.

  * Update `extra-patch-mysql-microseconds` -- this had bit-rotted
    somewhat, but could be recovered.

  * New OPTION: BEATS -- accept a feed from any of the Elastic *beats
    programs

  * Fix a failure when running `autoreconf` from autoconfigure-2.72
    (the default on FreeBSD) whereas upstream seems to be using
    autoconfigure-2.71 successfully.

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2606.0/ChangeLog
Reported by:	repology, GitHub release notifications
b6bbc802a0
Matthew Seaman (matthew) · 8.2604.0
sysutils/rsyslog8: update to 8.2604.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2604.0/ChangeLog
Reported by:	repology
d1594f9fec
Matthew Seaman (matthew) · 8.2602.0_1
sysutils/rsyslog8: Fix compilation when KAFKA option selected

Add #define __BSD_VISIBLE to get the uint typedef in sys/types.h

PR:	293465
Reported by:	girgen
37be2a3a82
Matthew Seaman (matthew) · 8.2602.0
sysutils/rsyslog8: update to 8.2602.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2602.0/ChangeLog

Reported by:	repology
25fa745e83
Matthew Seaman (matthew) · 8.2512.0
sysutils/rsyslog8: update to 8.2512.0

Changes:	https://github.com/rgerhards/rsyslog/blob/v8.2512.0/ChangeLog
Reported by:	repology
221f99fd4a
Matthew Seaman (matthew) · 8.2510.0
sysutils/rsyslog8: Update to 8.2510.0

Changes:	https://github.com/rgerhards/rsyslog/blob/v8.2510.0/ChangeLog
Reported by:	repology
1e04fbf1dd
Matthew Seaman (matthew) · 8.2508.0
sysutils/rsyslog8: update to 8.2508.0

Delete files/patch-runtime_net__ossl.c and the additional patch
72b8bcc05318f0a72ec828d1a5329fa98c021eb8.patch from upstream: these
are both incorporated in this release.

Regenerate patches.

Changes:	https://github.com/rgerhards/rsyslog/blob/v8.2508.0/ChangeLog
Reported by:	repology
8992e2f3e2
Matthias Andree (mandree) · 8.2506.0_2
*/*: Bump PORTREVISION after libuuid/libblkid switch

from e2fsprogs to util-linux, to complete the bump of all users
of either library that started with Alexander's commit titled
'*/*: Switch to misc/libuuid and misc/libblkid'

PR:		251489
9eb3fb8e5b
Matthias Andree (mandree) · 8.2506.0_1
*/*: Switch to misc/libuuid and misc/libblkid

PR:		221293
PR:		251489
PR:		257070
e81eda36a8
Matthew Seaman (matthew) · 8.2506.0_1
sysutils/rsyslog8: switch to PATCHFILES/PATCH_SITES

This is the preferred means of adding specific git commits as patches
to a release. No functional change.

Reported by:	kevans, hellspawn (IRC/Slack)
fae2b9f3ed
Matthew Seaman (matthew) · 8.2506.0
sysutils/rsyslog8: update to 8.2506.0

Delete files/patch/plugins_{i,o}mdtls_{i,o}mdtls.c -- patch accepted by upstream and incorporated in this release.

Add patch derived from
https://github.com/rgerhards/rsyslog/commit/72b8bcc05318f0a72ec828d1a5329fa98c021eb8
-- since FreeBSD (like Solaris) doesn't provide a UT_LINESIZE constant
in utmpx.h

Regenerate patches.

Changes:	https://github.com/rgerhards/rsyslog/blob/v8.2506.0/ChangeLog
Reported by:	repology
f2bdca5f54
Matthew Seaman (matthew) · 8.2504.0
sysutils/rsyslog8: update to 8.2504.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2504.0/ChangeLog
Reported by:	repology
b7a9b58263
Matthew Seaman (matthew) · 8.2502.0
sysutils/rsyslog8: update to 8.2502.0

Changes:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
Reported by:	repology
69e14f37ff
Matthew Seaman (matthew) · 8.2412.0
sysutils/rsyslog8: update to 8.2412.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2412.0/ChangeLog
Reported by:	repology
6d438bcc68
Matthew Seaman (matthew) · 8.2410.0
sysutils/rsyslog8: update to 8.2410.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2410.0/ChangeLog
Reported by:	repology
bf06b88143
Matthew Seaman (matthew) · 8.2408.0
sysutils/rsyslog8: update to 8.2408.0

Changes:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
Reported by:	repology
8d372db6a7
Matthew Seaman (matthew) · 8.2406.0
sysutils/rsyslog8: update to 8.2406.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2406.0/ChangeLog
Reported by:	repology
e39f9470c5
Matthew Seaman (matthew) · 8.2404.0
sysutils/rsyslog8: update to 8.2404.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2404.0/ChangeLog
Reported by:	repology
d07bc71816
Matthew Seaman (matthew) · 8.2402.0_1
sysutils/rsyslog8: fix build with libressl, add DTLS option

rsyslog8 fails to build with libressl due to lack of support of the
SSL_CONF_CTX type.  This occurs in a block of code only used by the
DTLS input and output modules, which are not enabled by default in the
FreeBSD port.

Therefore solve the build failure by making the problematic function
dependant on LIBRESSL_VERSION_NUMBER being defined (via
files/patch-runtime_net__ossl.c, obtained from github issue 5342 for
rsyslog).  This is similar to previous libressl compatability fixes
from PR 254864.

While here, add a DTLS option to enable building the imdtls and omdtls
modules -- this does require linkage against openssl to compile
successfully.  Additionally required patches are to add the necessary
header files for the pthread_kill(3) and close(2) prototypes.  I have
not been able to test the functionality of the DTLS modules very
effectively and would be glad to hear of anyone's experiences with
them.

PR:		278018
Reported by:	Dave Hayes <dave@jetcafe.org>
Obtained from:	(partly) https://github.com/rsyslog/rsyslog/issues/5342
04edb069f9
Matthew Seaman (matthew) · 8.2402.0
sysutils/rsyslog8: update to 8.2402.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2402.0/ChangeLog
Reported by:	repology
dc1b81e7f1
Gleb Popov (arrowd) · 8.2312.0_1
sysutils/rsyslog8: clean up manpages

Track impending changes to autotools.

Approved by:	portmgr (blanket)
8e9fd7037d
Matthew Seaman (matthew) · 8.2312.0
sysutils/rsyslog8: update to 8.2312.0

Delete `files/patch-tools_rsyslogd.c` -- this patch fixing an
inability to fork rsyslog is now incorporated upstream.

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2312.0/ChangeLog
Reported b:	replogy
1f8f9ee922
Matthew Seaman (matthew) · 8.2310.0_2
sysutils/rsyslog8: patch for forking issue due to close_range() call

Add patch from upstream:

https://github.com/rsyslog/rsyslog/commit/599b5c7524b76cfc73245206fcce1e2b4d955f21

After fork if the child process uses close_range to close open file
descriptors it has no way to exempt the parentPipeFD causing a failure
to signal successful startup to the parent process. This causes
failures on all systems that aren't Linux that implement close_range.

1. Loop through file descriptors between beginClose and
   MAX(parentPipeFD,dbgGetDbglogFd()) making sure not to close those two
   file descriptors.

2. Potentially use close_range to close all file descriptors above
   MAX(parentPipeFD,dbgGetDbglogFd())

PR:	        274509
Reported by:	Helmut Ritter
Obtained from:	https://github.com/rsyslog/rsyslog/pull/5254
959521fd0d
Matthew Seaman (matthew) · 8.2310.0_1
sysutils/rsyslog8: Mark broken

The upgrade to 8.2310.0 has resulted in a non-working version which
floods the log file with hundreds of messages and consumes all
available memory:

Oct 15 16:00:54 BSDHelmut rsyslogd[29360] imuxsock: recvfrom UNIX: Socket operation on non-socket [v8.2310.0]

Other reports show rsyslog attempting to use Linux /proc which also
fails.

Mark broken temporarily pending a response from upstream..

See https://github.com/rsyslog/rsyslog/issues/5241

PR:		274509
Reported by:	Helmut Ritter
f1c490b2ec
Matthew Seaman (matthew) · 8.2310.0
sysutils/rsyslog8: update to 8.2310.0

Changes:`	https://github.com/rsyslog/rsyslog/blob/v8.2310.0/ChangeLog
Reported by:	repology
9142ffe276
Matthew Seaman (matthew) · 8.2308.0
sysutils/rsyslog8: update to 8.2308.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2308.0/ChangeLog
Reported by:	repology
1a3d9a4895
Matthew Seaman (matthew) · 8.2306.0
sysutils/rsyslog8: update to 8.2306.0

Changes:	https://github.com/rsyslog/rsyslog/blob/v8.2306.0/ChangeLog
Reported by:	repology
32470e8de6
Matthew Seaman (matthew) · 8.2304.0
sysutils/rsyslog8: update to 8.2304.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2304.0/ChangeLog
Reported by:	repology
0b6d74279c
Matthew Seaman (matthew) · 8.2302.0
sysutils/rsyslog8: update to 8.2302.0

Chagnes:	https://github.com/rsyslog/rsyslog/blob/v8.2302.0/ChangeLog
bff4366051
Matthew Seaman (matthew) · 8.2212.0
sysutils/rsyslog8: update to 8.2212.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2212.0/ChangeLog
b482599d5a
Matthew Seaman (matthew) · 8.2210.0
sysutils/rsyslog8: upate to 8.2210.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2210.0/ChangeLog
3e218e7b01
Stefan Eßer (se) · 8.2208.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 8.2208.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Matthew Seaman (matthew) · 8.2208.0
sysutils/rsyslog8: Update to 8.2208.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2208.0/ChangeLog
4efa00ddee
Matthew Seaman (matthew) · 8.2204.1
sysutils/rsyslog8: security update to 8.2204.1

Heap buffer overflow on receiving TCP syslog traffic

https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8

Security:	b9837fa1-cd72-11ec-98f1-6805ca0b3d42
ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2204.1/ChangeLog
8583bcdcde
Matthew Seaman (matthew) · 8.2204.0
sysutils/rsyslog8: update to 8.2204.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2204.0/ChangeLog
2047503c90
Matthew Seaman (matthew) · 8.2202.0_1
sysutils/rsyslog8: delete unnecessary code

Remove USE_LDCONFIG -- the port installs a number of loadable modules
for its own use.  These are not shared libraries that ldconfig(8)
needs to deal with. (1)

Remove REINPLACE_CMD lines that no longer do anything.  The library
path compiled into the code is set from autoconfig nowadays.

PR:		262393 (1)
Reported by:	mikael
3f360912cd
Matthew Seaman (matthew) · 8.2202.0
sysutils/rsyslog8: update to 8.2202.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2202.0/ChangeLog
173eddc038
Tobias Kortkamp (tobik) · 8.2112.0_1
*: Clean up some things

- Fix typos
- Fix overwritten variables

Reported by:	portscan
dfd0e4d833
Matthew Seaman (matthew) · 8.2112.0
sysutils/rsyslog8: Add pmciscoios module for parsing Cisco IOS logs

This is a very small loadable module with no additional dependencies,
so just add it to the default package unconditionally.

Requested by:	Klein Emanuel
cbad08dcef
Matthew Seaman (matthew) · 8.2112.0
sysutils/rsyslog8: update to 8.2112.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2112.0/ChangeLog
ded541dcf2
Matthew Seaman (matthew) · 8.2110.0_1
sysutils/rsyslog8: update pkg-message and add sample config file

Upstream changes mean that the advice formerly given in pkg-message to
modify the default /etc/syslog.conf file as the basis of a new
${PREFIX}/etc/rsyslog.conf are now less useful and confusing to end
users.

Therefore, update the pkg-message accordingly, and install a sample
config file which should duplicated the functionality of the base
syslog.conf.

PR:		260158
Reported by:	Mark Johnston
2a74583ea3
Matthew Seaman (matthew) · 8.2110.0
sysutils/rsyslog8: Update to 8.2110.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2110.0/ChangeLog
37f775eb84
Bernhard Froehlich (decke) · 8.2108.0
sysutils/rsyslog8: Add CPE information

Approved by:	portmgr (blanket)
9bb1f615e5
Matthew Seaman (matthew) · 8.2108.0
sysutils/rsyslog8: update to 8.2108.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2108.0/ChangeLog
f199abc9fe