CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

sysutils/rsyslog8 8.2610.0

Syslogd supporting SQL, TCP, and TLS

Port info

Maintainer
matthew@FreeBSD.org
Packages
latest: rsyslog 8.2610.0, rsyslog-mysql 8.2610.0, rsyslog-pgsql 8.2610.0
Upstream
up to date
Last update
to 8.2610.0 · fef887c46b
Quarterly
2026Q4: rsyslog 8.2608.0_1, rsyslog-mysql 8.2608.0_1, rsyslog-pgsql 8.2608.0_1 1 unaddressed
WWW
https://www.rsyslog.com/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install rsyslog
# pkg install rsyslog-mysql
# pkg install rsyslog-pgsql
installs rsyslog 8.2610.0, rsyslog-mysql 8.2610.0, rsyslog-pgsql 8.2610.0 from latest; from quarterly (2026Q4) rsyslog 8.2608.0_1, rsyslog-mysql 8.2608.0_1, rsyslog-pgsql 8.2608.0_1
Port
# cd /usr/ports/sysutils/rsyslog8 && make install clean
# make -C /usr/ports/sysutils/rsyslog8 config  # change options first
Size
582 KiB download · 1.6 MiB installed
Depends on
archivers/snappy 1.3.1, devel/libestr 0.1.11_1, devel/libfastjson 1.2609.0, devel/liblogging 1.0.8, devel/protobuf-c 1.5.2, ftp/curl 8.23.0, misc/libuuid 2.42.4, security/libgcrypt 1.12.4, security/libgpg-error 1.61, textproc/libyaml 0.2.5
License
APACHE20 and GPLv3 and LGPL3
Options
2 of 18 on in the package: DOCS GCRYPT
Show the 16 options that are off
BEATS DBI DTLS ELASTIC GNUTLS GSSAPI HTTP JSONPARSE KAFKA MYSQL NORMALIZE OPENSSL PGSQL RABBITMQ RELP SNMP
pkg-message
Shown after installing
To start using rsyslogd(8), stop syslogd(8) if it is running and
add the following lines to rc.conf(5):

  syslogd_enable="NO"
  rsyslogd_enable="YES"

For best results, create a new configuration file
/usr/local/etc/rsyslog.conf rather than trying to re-use the original
/etc/syslog.conf -- the configuration file syntax has diverged over
time, and it's no longer anywhere near compatible.

The port will install an example configuration file which should
provide the same logging setup as the default /etc/syslog.conf

newsyslog(8) has the path of syslogd's pid file hardcoded. To
make it work seamlessly with rsyslog, add this:

  rsyslogd_pidfile="/var/run/syslog.pid"
Note
Size, dependencies, options and messages are those of rsyslog.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 168.2610.08.2608.0_1–
FreeBSD 158.2610.08.2608.0_1–
FreeBSD 148.2610.08.2608.0_18.2610.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 158.2608.0_18.2608.0_1–
FreeBSD 148.2608.0_18.2608.0_18.2608.0_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 8.2610.0 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-927098.12026-10-22Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexi…

VuXML only (0)

Listed in VuXML, the packaged version 8.2610.0 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (134)

Matthew Seaman (matthew) · 8.24.0
Update to 8.24.0

ChangeLog: https://github.com/rsyslog/rsyslog/blob/v8.24.0/ChangeLog
2123823ca1
Matthew Seaman (matthew) · 8.23.0_1
D'Oh.  I forgot to bump PORTREVISION.
ff84716c24
Matthew Seaman (matthew) · 8.23.0
Handle errno==5 (EIO) as the result of trying to write(2) to the console.

Submittet upstream by Damien Fleurot:
https://github.com/rsyslog/rsyslog/issues/1351

PR:		211033
Submitted by:	dam@my.gd
Reported by:	xavi.garcia@gmail.com
8785d8ad4a
Matthew Seaman (matthew) · 8.23.0
Update to 8.23.0

Delete patch-configure.ac -- change has been included upstream.

ChangeLog:	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
8b9863d43a
Matthew Seaman (matthew) · 8.22.0_1
recvmmsg(2) is buggy in 11.0-RELEASE, but not recent 11-STABLE or HEAD -- the consequence for rsyslog being that it does not record any log messages received via UDP to a log file.

recvmmsg(2) fix was applied to HEAD in r307036 and MFC'd to 11-STABLE
in r307311.  Therefore prevent configure testing for recvmmsg(2)
before OSVERSION 1100504.  Note: this is a no-op for older releases
than 11 -- recvmmsg(2) doesn't exist there.

PR:		214428
Reported by:	dch@skunkwerks.at
MFH:		2016Q4
a72bab3341
Matthew Seaman (matthew) · 8.22.0
Update to 8.22.0

ChangeLog: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
19a78a9dd8
Matthew Seaman (matthew) · 8.21.0
Update to 8.21.0 - Add license - Placate portlint somewhat - Add new GCRYPT option (default on): this is required is the GNUTLS option   is enabled - Delete obsolete '--enable-cached-man-pages' from CONFIGURE_ARGS
7367d26c91
Matthew Seaman (matthew) · 8.19.0_1
Fix autoconf detection of pthread_setschedparam() -- the test program needs to be linked against -lpthread.

Regenerate patches by 'make makepatch'

Take maintainership

PR:		212823
Approved by:	brd
bc987eb569
Brad Davis (brd) · 8.19.0
Fix the build of sysutils/rsyslog8 by pointing at the new JSON dependency.

Submitted by:	olgeni
Approved by:	bdrewery (implicit)
bff9ea9424
Brad Davis (brd) · 8.19.0
- Upgrade sysutils/rsyslog8 to 8.19.0 and make it the default - Mark sysutils/rsyslog7 deprecated.

Approved by:	bdrewery (mentor)
c481b80979
Mathieu Arnold (mat) · 8.11.0_1
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Tijl Coosemans (tijl) · 8.11.0_1
- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol   supported by libgnutls-dane and gnutls-cli.  Also clarify the option   description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4.  Some ports used this library   in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed.  Ports t

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)
6bc6f3a9e0
Matthew Seaman (matthew) · 8.11.0
* Update to 8.11.0   - Upstream has incorporated one part of the patches to runtime/stream.c   - regenerate patches with 'make makepatch' * Modernize port   - Use OPTION helpers   - USE_AUTOTOOLS -> USES+= autoreconf * Set INSTALL_TARGET=install-strip rather than stripping in post-install:   - Previously optional modules wouldn't have been stripped * Update pkg-message.in to use the now standard '

PR:		202080
Approved by:	brd (maintainer)
8b1a09a372
Brad Davis (brd) · 8.10.0
Update sysutils/rsyslog8 to 8.10.0

Include a few bug fixes:
1) Endless loop at boot time
2) Console output starting on the previous line

PR:		200429 [1]
PR:		200270 [2]
Submitted by:	Alexandre Fenyo <fbsd.bugzilla@fenyo.net> [1 and 2]
Approved by:	bdrewery (mentor)
21b8eb2fb0
Brad Davis (brd) · 8.9.0
Update sysutils/rsyslog8 to 8.9.0.

Approved by:	bdrewery (mentor)
b9bd19c4fb
Brad Davis (brd) · 8.8.0
Upgrade sysutils/rsyslog8 to 8.8.0.

Changelog: http://www.rsyslog.com/changelog-for-8-8-0-v8-stable/

Approved by:	bdrewery
f021b478aa
Brad Davis (brd) · 8.7.0
- Upgrade sysutils/rsyslog8 to 8.7.0. [1] - Deprecate sysutils/rsyslog7-devel and sysutils/rsyslog8-devel [2]

1: http://www.rsyslog.com/changelog-for-8-7-0-v8-stable/
2: http://www.rsyslog.com/rsyslog-devel-packages-are-being-removed-soon/

Approved by:	zi
8eda03674b
Kurt Jaeger (pi) · 8.6.0_1
security/libgcrypt: 1.6.1 -> 1.6.2, bump depends

Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
  with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
  error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code.  Take
	care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
- Fix building for the x32 target without asm modules in
  mpi/generic/mpi-asm-defs.h: Use a fixed value for the x32 ABI.
- Fix ARM assembly when building __PIC__
- mpi: Fix a subtle bug setting spurious bits with in mpi_set_bit.
  * mpi/mpi-bit.c (_gcry_mpi_set_bit, _gcry_mpi_set_highbit): Clear
    allocated but not used bits before resizing.
  * tests/t-mpi-bits.c (set_bit_with_resize): New.
- Use internal malloc function in fips.c.
  * src/fips.c (check_binary_integrity): s/gcry_malloc/xtrymalloc/.
- pubkey: Re-map all deprecated RSA algo numbers.
- cipher: Fix possible NULL dereference in cipher/md.c for being NULL.
- Fix ARMv6 detection when CFLAGS modify target CPU architecture.

PR:		193264
Approved by:	cpm@fbsd.es (maintainer)
cba03c03e1
Brad Davis (brd) · 8.6.0
Upgrade to 8.6.0

http://www.rsyslog.com/changelog-for-8-6-0-v8-stable/

1: Enable omuxsock by default
2: Fix broken build with RFC3195

PR:		191327 [1], 191412 [2]
Reviewed by:	swills
c72bec751e
Brad Davis (brd) · 8.4.2_1
Enable the omprog output module by default.

PR:		195046
Submitted by:	rand@iteris.com
Approved by:	zi
f93118816d
Chris Rees (crees) · 8.4.2
Finally retire USE_PGSQL
4cb60faedd
Antoine Brodin (antoine) · 8.4.2
Cleanup plist
23b328aaf9
Brad Davis (brd) · 8.4.2
- Remove an old patch that does not apply anymore that I missed in the previous commit

Reviewed by:	bdrewery
963c8aea2d
Brad Davis (brd) · 8.4.2
- Update sysutils/rsyslog7 to 7.6.7 [1] and sysutils/rsyslog8 to 8.4.2 [2] to fix CVE-2014-3634 [3].

1: http://www.rsyslog.com/changelog-for-7-6-7-v7-stable/
2: http://www.rsyslog.com/changelog-for-8-4-2-v8-stable/
3: http://www.rsyslog.com/remote-syslog-pri-vulnerability/

Reviewed by:	bdrewery
Security:	8e0e86ff-48b5-11e4-ab80-000c29f6ae42
cd4be1dd0b
Brad Davis (brd) · 8.4.1
- Actually update sysutils/rsyslog8 to 8.4.1

Reviewed by:	bdrewery@
Security:	8e0e86ff-48b5-11e4-ab80-000c29f6ae42
85716dc5b0
Brad Davis (brd) · 8.4.0
- Update sysutils/rsyslog7 to 7.6.6 [1] and sysutils/rsyslog8 to 8.4.1 [2] to fix CVE-2014-3634 [3].

1: http://www.rsyslog.com/changelog-for-7-6-6-v7-stable/
2: http://www.rsyslog.com/changelog-for-8-4-1-v8-stable/
3: http://www.rsyslog.com/remote-syslog-pri-vulnerability/

Reviewed by:	bdrewery@
Security:	8e0e86ff-48b5-11e4-ab80-000c29f6ae42
feb8eb997b
Dmitry Marakasov (amdmi3) · 8.2.1_4
- Switch databases/libdbi to USES=libtool, drop .la files - Bump dependent ports as .so version has changed

Approved by:	portmgr blanket
f09d798832
Adam Weinberger (adamw) · 8.2.1_3
Fix build after json-c update.

rsyslog8-devel fails to build against the new json-c, so I've marked it
BROKEN.
6abb9fe776
Kurt Jaeger (pi) · 8.2.1_3
security/libgcrypt: 1.5.3_3 -> 1.6.1

- Update to 1.6.1
- Remove some unneeded patches
- Fix pkg-plist
- report configure bug upstream
  https://bugs.g10code.com/gnupg/issue1668
- report API breakage downstream and find that MacPorts had the same issue
  https://rt.cpan.org/Ticket/Display.html?id=97201
- bump PORTREVISION for dependent ports (approx. 100 ports)
- Thanks to exp-run by antoine@ to find ports that break
- patch ports that would otherwise break
  security/shishi with PR 192164 is already committed
  [1] devel/ccrtp
  [2] editors/abiword
  [3] security/p5-Crypt-GCrypt

PR:		191256, 192162 [1], 192163 [2], 192166 [3]
Submitted by:	Carlos Jacobo Puga Medina <cjpugmed@gmail.com>
Approved by:	maintainer timeout, antoine (exp-run), portmgr (implicit)
b95d127471
Tijl Coosemans (tijl) · 8.2.1_2
- Replace security/gnutls with security/gnutls3 and update to 3.2.15 - Bump PORTREVISION on all ports that depend on security/gnutls and   adjust all ports that depend on security/gnutls3 - Update mail/anubis to version 4.2 which supports gnutls 3.x - Update mail/libvmime to a development snapshot (recommended by upstream   developers)

PR:		191274
Exp-run by:	antoine
Approved by:	portmgr (antoine)
3ab1b8443e
Dmitry Marakasov (amdmi3) · 8.2.1_1
- Fix plist dependent on options - Fix dependency on libdbi in rsyslog7

Approved by:	portmgr blanked
Reported by:	Yuriy Korobko <make dot kernel at gmail dot com>
eb3001aee0
Dmitry Marakasov (amdmi3) · 8.2.1_1
- Switch to USES=libtool, drop .la files

Approved by:	portmgr blanket
fec7aca632
Antoine Brodin (antoine) · 8.2.1
Fix pkgname collisions

With hat:	portmgr
06f8f0d564
Brad Davis (brd) · 8.2.1
- Update rsyslog8-devel from 8.1.6 to 8.3.2 - Add rsyslog8 at version 8.2.1

Reviewed by:	zi@
d710957b5a