CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

sysutils/rsyslog8 8.2610.0

Syslogd supporting SQL, TCP, and TLS

Port info

Maintainer
matthew@FreeBSD.org
Packages
latest: rsyslog 8.2610.0, rsyslog-mysql 8.2610.0, rsyslog-pgsql 8.2610.0
Upstream
up to date
Last update
to 8.2610.0 · fef887c46b
Quarterly
2026Q4: rsyslog 8.2608.0_1, rsyslog-mysql 8.2608.0_1, rsyslog-pgsql 8.2608.0_1 1 unaddressed
WWW
https://www.rsyslog.com/
Links
cgit · VuXML

Install

Package
# pkg install rsyslog
# pkg install rsyslog-mysql
# pkg install rsyslog-pgsql
installs rsyslog 8.2610.0, rsyslog-mysql 8.2610.0, rsyslog-pgsql 8.2610.0 from latest; from quarterly (2026Q4) rsyslog 8.2608.0_1, rsyslog-mysql 8.2608.0_1, rsyslog-pgsql 8.2608.0_1
Port
# cd /usr/ports/sysutils/rsyslog8 && make install clean
# make -C /usr/ports/sysutils/rsyslog8 config  # change options first
Size
582 KiB download · 1.6 MiB installed
Depends on
archivers/snappy 1.3.1, devel/libestr 0.1.11_1, devel/libfastjson 1.2609.0, devel/liblogging 1.0.8, devel/protobuf-c 1.5.2, ftp/curl 8.23.0, misc/libuuid 2.42.4, security/libgcrypt 1.12.4, security/libgpg-error 1.61, textproc/libyaml 0.2.5
License
APACHE20 and GPLv3 and LGPL3
Options
2 of 18 on in the package: DOCS GCRYPT
Show the 16 options that are off
BEATS DBI DTLS ELASTIC GNUTLS GSSAPI HTTP JSONPARSE KAFKA MYSQL NORMALIZE OPENSSL PGSQL RABBITMQ RELP SNMP
pkg-message
Shown after installing
To start using rsyslogd(8), stop syslogd(8) if it is running and
add the following lines to rc.conf(5):

  syslogd_enable="NO"
  rsyslogd_enable="YES"

For best results, create a new configuration file
/usr/local/etc/rsyslog.conf rather than trying to re-use the original
/etc/syslog.conf -- the configuration file syntax has diverged over
time, and it's no longer anywhere near compatible.

The port will install an example configuration file which should
provide the same logging setup as the default /etc/syslog.conf

newsyslog(8) has the path of syslogd's pid file hardcoded. To
make it work seamlessly with rsyslog, add this:

  rsyslogd_pidfile="/var/run/syslog.pid"
Note
Size, dependencies, options and messages are those of rsyslog.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 168.2610.08.2608.0_1–
FreeBSD 158.2610.08.2608.0_1–
FreeBSD 148.2610.08.2608.0_18.2610.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 158.2608.0_18.2608.0_1–
FreeBSD 148.2608.0_18.2608.0_18.2608.0_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 8.2610.0 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-927098.12026-10-22Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexi…

VuXML only (0)

Listed in VuXML, the packaged version 8.2610.0 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (134)

Matthew Seaman (matthew) · 8.2106.0
sysutils/rsyslog8: update to 8.2106.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2106.0/ChangeLog
265c4e13c4
Matthew Seaman (matthew) · 8.2104.0
sysutils/rsyslog8: Update to 8.2104.0

ChangeLog:	   https://github.com/rsyslog/rsyslog/blob/v8.2104.0/ChangeLog
0c95242cd1
Matthew Seaman (matthew) · 8.2102.0_1
sysutils/rsyslog8 -- improve libressl compatibility

PR:		254864
Reported by:	dave@jetcafe.org
Obtained from:	Gentoo (https://bugs.gentoo.org/750842)
b7cc041430
Mathieu Arnold (mat) · 8.2102.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 8.2102.0
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 8.2102.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Matthew Seaman (matthew) · 8.2102.0
Update to 8.2102.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2102.0/ChangeLog
bf1bda8d6a
Matthew Seaman (matthew) · 8.2012.0
Update to 8.2012.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2012.0/ChangeLog
86f51db2f0
Matthew Seaman (matthew) · 8.2010.0
Update to 8.2010.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2010.0/ChangeLog
be986b1fa1
Matthew Seaman (matthew) · 8.2008.0
Update to 8.2008.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
bdfc46ff16
Matthew Seaman (matthew) · 8.2006.0_1
Prevent rsyslogd from writing log messages about TZ being unset in the environment.

This is a putely cosmetic change, as the default behaviour according
to tzset(3) is:

```
     If TZ does not appear in the environment, the best available
     approximation to local wall clock time, as specified by the
     tzfile(5)-format file /etc/localtime is used.
```

Slightly modified from the patch supplied by zi to use the rc.subr(8)
'${name}_env' variable.

PR:		248185
Submitted by:	zi
12bb4bd7e6
Matthew Seaman (matthew) · 8.2006.0
Update to 8.2006.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2006.0/ChangeLog
03787034c2
Matthew Seaman (matthew) · 8.2004.0
Update to 8.2004.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2004.0/ChangeLog
49c05f4c75
Matthew Seaman (matthew) · 8.2002.0
Update to 8.2002.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2002.0/ChangeLog
837228340c
Matthew Seaman (matthew) · 8.2001.0
Update to 8.2001.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.2001.0/ChangeLog
4bd11b7e32
Matthew Seaman (matthew) · 8.1911.0
Update to 8.1911.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.1911.0/ChangeLog
815e2a0f6b
Matthew Seaman (matthew) · 8.1910.0
Update to 8.1910.0

ChangeLog: https://github.com/rsyslog/rsyslog/blob/v8.1910.0/ChangeLog
3dbee915c7
Matthew Seaman (matthew) · 8.1908.0
Update to 8.1908.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.1908.0/ChangeLog
2bdb1f673b
Mathieu Arnold (mat) · 8.1907.0_1
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Matthew Seaman (matthew) · 8.1907.0_1
Drop the dependency on libee -- this has actually been irrelevant for some time, but only recently noted in the rsyslog changelogs.
653855cbac
Matthew Seaman (matthew) · 8.1907.0
Update to 8.1907.0

Remove the patches around enabling rfc5424 support for 12.0 and above,
as this functionality has now been incorporated upstream.
232ff2017b
Matthew Seaman (matthew) · 8.1905.0
Use the autoconf caching mechanism to set two variables thus preventing configure from finding libinotify even if it is present. This will have no effect on packages built in a clean environment, but it will make it easier to just build ad-hoc out of the ports tree.

Submitted by:	koobs
Reported by:	atari83
Differential Revision:	https://reviews.freebsd.org/D20815
bdebb4b746
Matthew Seaman (matthew) · 8.1905.0
Update to 8.1905.0

Submitted by:	dch
Differential Revision:	https://reviews.freebsd.org/D20456
beed1febd4
Dave Cottlehuber (dch) · 8.40.0
sysutils/rsyslog8: add new options kafka, amqp & http

Reviewed by:	matthew
Approved by:	jrm (mentor)
Differential Revision:	https://reviews.freebsd.org/D20024
cd9b362e1b
Matthew Seaman (matthew) · 8.40.0
Upgrade to 8.40.0

ChangeLog: https://github.com/rsyslog/rsyslog/blob/v8.40.0/ChangeLog
470cba1f04
Rene Ladan (rene) · 8.39.0
Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724
8a502cb2d4
Matthew Seaman (matthew) · 8.39.0
Update to 0.39.0

ChangeLog: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
9dd2a33c5b
Matthew Seaman (matthew) · 8.38.0
Update to 8.38.0

Changelog: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
f51958d399
Matthew Seaman (matthew) · 8.37.0_2
Second try at fixing linking problems with the OPENSSL option is selected.

PR:		230913
Submitted by:	Axel.Rau@Chaos1.DE
2e27de97c2
Matthew Seaman (matthew) · 8.37.0_1
Add a new OPENSSL option as an alternative to GNUTLS.  This parallels a simlar fix to librelp, and tracks the upstream project's intention to switch from gnutls to openssl over time.  The default remains to not compile in any TLS support in rsyslog8.

PR:		230913
a271060745
Matthew Seaman (matthew) · 8.37.0
Update to 8.37.0

Update WWW

ChangeLog: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
2a3299b78f
Matthew Seaman (matthew) · 8.36.0
Update to 8.36.0

Upstream is deprecating liblogging-stdlog.so.0, but we still need the
devel/liblogging port because we link against liblogging-rfc3195.so.0
-- adjust the dependency accordingly.

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/v8.36.0/ChangeLog
e9f0056b28
Matthew Seaman (matthew) · 8.35.0
Update to 8.35.0

- allow for BUILD_DEPENDS py-docutils to be flavoured.  This avoids
  rebuilding the dependency every time in some environments where
  rst2man ends up being installed with a version tag.

ChangeLog:     https://github.com/rsyslog/rsyslog/blob/v8.35.0/ChangeLog
8f1033b633
Matthew Seaman (matthew) · 8.34.0
Update to 8.34.0

Add patches to configuration system to allow specifying whether
syslog(3) generates RFC5424 format messages, instead of RFC3164.

Set RFC5424 as the syslog(3) default for OSVER >= 1200061. See:
https://reviews.freebsd.org/D14951 This is primarily a convenience so
that users of rsyslog8 will not have to modify their rsyslog.conf when
upgrading to a version of FreeBSD that generates RFC5424 from
syslog(3).  I will submit these patches upstream in due course.
d1fcfca6c9
Matthew Seaman (matthew) · 8.33.1
Upgrade to 8.33.1

ChangeLog: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
8545e28c13
Matthew Seaman (matthew) · 8.33.0
Update to 8.33.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
5e60dee35b
Matthew Seaman (matthew) · 8.32.0
Update to 8.32.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
9e5223e454
Matthew Seaman (matthew) · 8.31.0
Update to 8.31.0

ChangeLog: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
1e5f2b84a9
Matthew Seaman (matthew) · 8.30.0
Update to 8.30.0

ChangeLog: https://github.com/rsyslog/rsyslog/blob/v8.30.0/ChangeLog
a9e368c35b
Matthew Seaman (matthew) · 8.29.0
Update to 8.29.0

Changes:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
aad1a36ba1
Matthew Seaman (matthew) · 8.28.0
Appease portlint by reordering some items in the Makefile

Group FOO_DESC with all the other options helpers for option FOO

When DOCS are enabled and one or both of MYSQL and PGSQL options are
selected, install the corresponding createDB.sql file for generating
the DB schema rsyslog expects [1]

PR:		221012
Reported by:	rainer@ultra-secure.de [1]
1a92660dea
Matthew Seaman (matthew) · 8.28.0
rsyslog cannot use the Inotify emulation provided by the devel/libinotify port -- the kqueue based emulation does not persist over forking, unlike the genuine linux inotify.

However, the presence of certain header files will cause rsyslog to
attempt to unconditionally compile in Inotify support, and this breaks
the build.

Use CONFLICTS_BUILD to mark the incompatibility.

PR:		220376
Submitted by:	dewayne@heuristicsystems.com.au
3c28f7d70d
Matthew Seaman (matthew) · 8.28.0
Update to 8.28.0

files/patch-plugins_omprog_omprog.c removed -- patch has been accepted
upstream and is incorporated in this release.
20830eea4b
Matthew Seaman (matthew) · 8.27.0_1
Fix for the omprog module -- calling execve() with a NULL second argument doesn't work.  Instead supply an argv list with just a terminating NULL entry.

Submitted upstream as https://github.com/rsyslog/rsyslog/pull/1618

Patch files regenerated by 'make makepatch'

Reported by:	(Chun-Tien Chang) <tcs@kitty.2y.idv.tw>
a7d3428b14
Matthew Seaman (matthew) · 8.27.0
Update to 8.27.0

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
2b86c6bc3e
Matthew Seaman (matthew) · 8.26.0
Update to 8.26.0

ChangeLog: http://git.adiscon.com/?p=rsyslog.git;a=blob;f=ChangeLog;h=fed83bf94450d25d929614ac4e9ad10cb44b95e7;hb=HEAD
486f2937c2
Matthew Seaman (matthew) · 8.25.0_2
Add a JSONPARSE option to enable building the mmjsonparse module:

http://www.rsyslog.com/doc/master/configuration/modules/mmjsonparse.html

PR:		218217
Submitted by:	rum1cro@yandex.ru
c46eed8def
Matthew Seaman (matthew) · 8.25.0_1
Add ELASTIC option to allow elastic search as an output destination. (1)

Add dependency on libcurl.so when ELASTIC selected, missing from
original submission

Switch from implicit USE_MYSQL=yes to uses= mysql

PR:		217876
Submitted by:	rum1cro@yandex.ru
51c4b723eb
Matthew Seaman (matthew) · 8.25.0
Update pkg-descr using the text of the blurb from ww.rsyslog.com

- we aren't tracking v7 any more. The clue is in the port name:
  sysutils/rsyslog8

Reported by:	des
217416c605
Matthew Seaman (matthew) · 8.25.0
Update to 8.25.0

- remove files/patch-runtime_stream.c -- patch has been incorporated
   upstream

ChagneLog:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
1b6af33f8a