Update to 8.24.0 ChangeLog: https://github.com/rsyslog/rsyslog/blob/v8.24.0/ChangeLog2123823ca1
rsyslog8 -- heap buffer overflow on receiving TCP syslogentered 2022-05-06
Syslogd supporting SQL, TCP, and TLS
# pkg install rsyslog# pkg install rsyslog-mysql# pkg install rsyslog-pgsqlinstalls rsyslog 8.2610.0, rsyslog-mysql 8.2610.0, rsyslog-pgsql 8.2610.0 from latest; from quarterly (2026Q4) rsyslog 8.2608.0_1, rsyslog-mysql 8.2608.0_1, rsyslog-pgsql 8.2608.0_1# cd /usr/ports/sysutils/rsyslog8 && make install clean# make -C /usr/ports/sysutils/rsyslog8 config # change options first
To start using rsyslogd(8), stop syslogd(8) if it is running and add the following lines to rc.conf(5): syslogd_enable="NO" rsyslogd_enable="YES" For best results, create a new configuration file /usr/local/etc/rsyslog.conf rather than trying to re-use the original /etc/syslog.conf -- the configuration file syntax has diverged over time, and it's no longer anywhere near compatible. The port will install an example configuration file which should provide the same logging setup as the default /etc/syslog.conf newsyslog(8) has the path of syslogd's pid file hardcoded. To make it work seamlessly with rsyslog, add this: rsyslogd_pidfile="/var/run/syslog.pid"
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 8.2610.0 | 8.2608.0_1 | – |
| FreeBSD 15 | 8.2610.0 | 8.2608.0_1 | – |
| FreeBSD 14 | 8.2610.0 | 8.2608.0_1 | 8.2610.0 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 8.2608.0_1 | 8.2608.0_1 | – |
| FreeBSD 14 | 8.2608.0_1 | 8.2608.0_1 | 8.2608.0_1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 8.2610.0 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-92709 | 8.1 | 2026-10-22 | Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexi… |
Listed in VuXML, the packaged version 8.2610.0 is still in the affected range; pkg audit reports it. What does this mean?
Update to 8.24.0 ChangeLog: https://github.com/rsyslog/rsyslog/blob/v8.24.0/ChangeLog2123823ca1
D'Oh. I forgot to bump PORTREVISION.ff84716c24
Handle errno==5 (EIO) as the result of trying to write(2) to the console. Submittet upstream by Damien Fleurot: https://github.com/rsyslog/rsyslog/issues/1351 PR: 211033 Submitted by: dam@my.gd Reported by: xavi.garcia@gmail.com8785d8ad4a
Update to 8.23.0 Delete patch-configure.ac -- change has been included upstream. ChangeLog: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog8b9863d43a
recvmmsg(2) is buggy in 11.0-RELEASE, but not recent 11-STABLE or HEAD -- the consequence for rsyslog being that it does not record any log messages received via UDP to a log file. recvmmsg(2) fix was applied to HEAD in r307036 and MFC'd to 11-STABLE in r307311. Therefore prevent configure testing for recvmmsg(2) before OSVERSION 1100504. Note: this is a no-op for older releases than 11 -- recvmmsg(2) doesn't exist there. PR: 214428 Reported by: dch@skunkwerks.at MFH: 2016Q4a72bab3341
Update to 8.22.0 ChangeLog: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog19a78a9dd8
Update to 8.21.0 - Add license - Placate portlint somewhat - Add new GCRYPT option (default on): this is required is the GNUTLS option is enabled - Delete obsolete '--enable-cached-man-pages' from CONFIGURE_ARGS7367d26c91
Fix autoconf detection of pthread_setschedparam() -- the test program needs to be linked against -lpthread. Regenerate patches by 'make makepatch' Take maintainership PR: 212823 Approved by: brdbc987eb569
Fix the build of sysutils/rsyslog8 by pointing at the new JSON dependency. Submitted by: olgeni Approved by: bdrewery (implicit)bff9ea9424
- Upgrade sysutils/rsyslog8 to 8.19.0 and make it the default - Mark sysutils/rsyslog7 deprecated. Approved by: bdrewery (mentor)c481b80979
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight597afc47ba- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol supported by libgnutls-dane and gnutls-cli. Also clarify the option description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4. Some ports used this library in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed. Ports t net-im/jabber: This port used the old API to give users fine grained control over which crypto algorithms were used via a configuration file. It's not immediately obvious how to port this to the new API so the port always uses the defaults now. www/hydra: Mark BROKEN. This uses more removed calls than the other ports, is said to be alpha quality and not fully functional and has been abandoned 10 years ago. PR: 207768 Exp-run by: antoine Approved by: portmgr (antoine)6bc6f3a9e0
* Update to 8.11.0 - Upstream has incorporated one part of the patches to runtime/stream.c - regenerate patches with 'make makepatch' * Modernize port - Use OPTION helpers - USE_AUTOTOOLS -> USES+= autoreconf * Set INSTALL_TARGET=install-strip rather than stripping in post-install: - Previously optional modules wouldn't have been stripped * Update pkg-message.in to use the now standard ' PR: 202080 Approved by: brd (maintainer)8b1a09a372
Update sysutils/rsyslog8 to 8.10.0 Include a few bug fixes: 1) Endless loop at boot time 2) Console output starting on the previous line PR: 200429 [1] PR: 200270 [2] Submitted by: Alexandre Fenyo <fbsd.bugzilla@fenyo.net> [1 and 2] Approved by: bdrewery (mentor)21b8eb2fb0
Update sysutils/rsyslog8 to 8.9.0. Approved by: bdrewery (mentor)b9bd19c4fb
Upgrade sysutils/rsyslog8 to 8.8.0. Changelog: http://www.rsyslog.com/changelog-for-8-8-0-v8-stable/ Approved by: bdreweryf021b478aa
- Upgrade sysutils/rsyslog8 to 8.7.0. [1] - Deprecate sysutils/rsyslog7-devel and sysutils/rsyslog8-devel [2] 1: http://www.rsyslog.com/changelog-for-8-7-0-v8-stable/ 2: http://www.rsyslog.com/rsyslog-devel-packages-are-being-removed-soon/ Approved by: zi8eda03674b
security/libgcrypt: 1.6.1 -> 1.6.2, bump depends
Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code. Take
care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
- Fix building for the x32 target without asm modules in
mpi/generic/mpi-asm-defs.h: Use a fixed value for the x32 ABI.
- Fix ARM assembly when building __PIC__
- mpi: Fix a subtle bug setting spurious bits with in mpi_set_bit.
* mpi/mpi-bit.c (_gcry_mpi_set_bit, _gcry_mpi_set_highbit): Clear
allocated but not used bits before resizing.
* tests/t-mpi-bits.c (set_bit_with_resize): New.
- Use internal malloc function in fips.c.
* src/fips.c (check_binary_integrity): s/gcry_malloc/xtrymalloc/.
- pubkey: Re-map all deprecated RSA algo numbers.
- cipher: Fix possible NULL dereference in cipher/md.c for being NULL.
- Fix ARMv6 detection when CFLAGS modify target CPU architecture.
PR: 193264
Approved by: cpm@fbsd.es (maintainer)cba03c03e1Upgrade to 8.6.0 http://www.rsyslog.com/changelog-for-8-6-0-v8-stable/ 1: Enable omuxsock by default 2: Fix broken build with RFC3195 PR: 191327 [1], 191412 [2] Reviewed by: swillsc72bec751e
Enable the omprog output module by default. PR: 195046 Submitted by: rand@iteris.com Approved by: zif93118816d
Finally retire USE_PGSQL4cb60faedd
Cleanup plist23b328aaf9
- Remove an old patch that does not apply anymore that I missed in the previous commit Reviewed by: bdrewery963c8aea2d
- Update sysutils/rsyslog7 to 7.6.7 [1] and sysutils/rsyslog8 to 8.4.2 [2] to fix CVE-2014-3634 [3]. 1: http://www.rsyslog.com/changelog-for-7-6-7-v7-stable/ 2: http://www.rsyslog.com/changelog-for-8-4-2-v8-stable/ 3: http://www.rsyslog.com/remote-syslog-pri-vulnerability/ Reviewed by: bdrewery Security: 8e0e86ff-48b5-11e4-ab80-000c29f6ae42cd4be1dd0b
- Actually update sysutils/rsyslog8 to 8.4.1 Reviewed by: bdrewery@ Security: 8e0e86ff-48b5-11e4-ab80-000c29f6ae4285716dc5b0
- Update sysutils/rsyslog7 to 7.6.6 [1] and sysutils/rsyslog8 to 8.4.1 [2] to fix CVE-2014-3634 [3]. 1: http://www.rsyslog.com/changelog-for-7-6-6-v7-stable/ 2: http://www.rsyslog.com/changelog-for-8-4-1-v8-stable/ 3: http://www.rsyslog.com/remote-syslog-pri-vulnerability/ Reviewed by: bdrewery@ Security: 8e0e86ff-48b5-11e4-ab80-000c29f6ae42feb8eb997b
- Switch databases/libdbi to USES=libtool, drop .la files - Bump dependent ports as .so version has changed Approved by: portmgr blanketf09d798832
Fix build after json-c update. rsyslog8-devel fails to build against the new json-c, so I've marked it BROKEN.6abb9fe776
security/libgcrypt: 1.5.3_3 -> 1.6.1 - Update to 1.6.1 - Remove some unneeded patches - Fix pkg-plist - report configure bug upstream https://bugs.g10code.com/gnupg/issue1668 - report API breakage downstream and find that MacPorts had the same issue https://rt.cpan.org/Ticket/Display.html?id=97201 - bump PORTREVISION for dependent ports (approx. 100 ports) - Thanks to exp-run by antoine@ to find ports that break - patch ports that would otherwise break security/shishi with PR 192164 is already committed [1] devel/ccrtp [2] editors/abiword [3] security/p5-Crypt-GCrypt PR: 191256, 192162 [1], 192163 [2], 192166 [3] Submitted by: Carlos Jacobo Puga Medina <cjpugmed@gmail.com> Approved by: maintainer timeout, antoine (exp-run), portmgr (implicit)b95d127471
- Replace security/gnutls with security/gnutls3 and update to 3.2.15 - Bump PORTREVISION on all ports that depend on security/gnutls and adjust all ports that depend on security/gnutls3 - Update mail/anubis to version 4.2 which supports gnutls 3.x - Update mail/libvmime to a development snapshot (recommended by upstream developers) PR: 191274 Exp-run by: antoine Approved by: portmgr (antoine)3ab1b8443e
- Fix plist dependent on options - Fix dependency on libdbi in rsyslog7 Approved by: portmgr blanked Reported by: Yuriy Korobko <make dot kernel at gmail dot com>eb3001aee0
- Switch to USES=libtool, drop .la files Approved by: portmgr blanketfec7aca632
Fix pkgname collisions With hat: portmgr06f8f0d564
- Update rsyslog8-devel from 8.1.6 to 8.3.2 - Add rsyslog8 at version 8.2.1 Reviewed by: zi@d710957b5a