CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

sysutils/syslog-ng4.12.0_5

Powerful syslogd replacement

Maintainer
cy@FreeBSD.org
Packages
syslog-ng 4.12.0_5
Upstream
up to date
CPE
oneidentity:syslog-ng from the port
WWW
https://www.syslog-ng.org/
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2022-387257.52023-01-23An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that i…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (229)

Po-Chuan Hsieh (sunpoet) · 4.12.0_5
devel/grpc: Update to 1.84.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
738abf718e
Po-Chuan Hsieh (sunpoet) · 4.12.0_4
devel/grpc: Update to 1.83.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
530e64e3e8
Cy Schubert (cy) · 4.12.0_3
sysutils/syslog-ng: Add python3.12+ support

Add support for python3.12, python3.13, and python3.14.
79f41ff60b
Yusuf Yaman (nxjoseph) · 4.12.0_3
sysutils/syslog-ng: chase devel/mongo-c-driver update

PR:		296603
Reported by:	Hiroo Ono <hiroo.ono+freebsd@gmail.com> (author)
Approved by:	Cy Schubert <cy@FreeBSD.org> (maintainer timeout, 3+ weeks)
Approved by:	osa, vvd (Mentors, implicit)
a2d2ee402e
Po-Chuan Hsieh (sunpoet) · 4.12.0_2
devel/grpc: Update to 1.82.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
e6d0edabaf
Po-Chuan Hsieh (sunpoet) · 4.12.0_1
devel/grpc: Update to 1.81.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
693421e658
Cy Schubert (cy) · 4.12.0
sysutils/syslog-ng: Update to 4.12.0
75a1948d04
Po-Chuan Hsieh (sunpoet) · 4.11.0_2
devel/grpc: Update to 1.80.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
c0a048676d
Po-Chuan Hsieh (sunpoet) · 4.11.0_1
devel/grpc: Update to 1.78.0

- Add OPENTELEMETRY option: disable by default for now due to build failure
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
5557f72092
Cy Schubert (cy) · 4.11.0
sysutils/syslog-ng: Update to 4.11.0

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
84f2980ccd
Ronald Klop (ronald) · 4.10.1_3
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Po-Chuan Hsieh (sunpoet) · 4.10.1_2
devel/grpc: Update to 1.76.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
6b900360fe
Po-Chuan Hsieh (sunpoet) · 4.10.1_1
devel/grpc: Update to 1.75.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
1e58bd06cc
Cy Schubert (cy) · 4.10.1
sysutils/syslog-ng: Update to 4.10.1

Sumbitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
9c60ef0be8
Po-Chuan Hsieh (sunpoet) · 4.8.2_4
devel/grpc: Update to 1.74.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
8731b5c0dd
Matthias Andree (mandree) · 4.8.2_3
*/*: Bump PORTREVISION after libuuid/libblkid switch

from e2fsprogs to util-linux, to complete the bump of all users
of either library that started with Alexander's commit titled
'*/*: Switch to misc/libuuid and misc/libblkid'

PR:		251489
9eb3fb8e5b
Matthias Andree (mandree) · 4.8.2_2
*/*: Switch to misc/libuuid and misc/libblkid

PR:		221293
PR:		251489
PR:		257070
e81eda36a8
Charlie Li (vishwin) · 4.8.2_2
python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.

Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.

PR: 274671
Event: Kitchener-Waterloo Hackathon 202506
4f0eba1efd
Po-Chuan Hsieh (sunpoet) · 4.8.2_2
devel/grpc: Update to 1.73.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
69bfe8f143
Po-Chuan Hsieh (sunpoet) · 4.8.2_1
devel/grpc: Update to 1.72.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
3ebb999ea0
Cy Schubert (cy) · 4.8.2
sysutils/syslog-ng: Update to 4.8.2

Fix CVE-2024-47619 possible not in a default configuration.

Fix other problems relating to S3 destination reliability.

Security:	CVE-2024-47619 (not in default configuration)
		https://www.cve.org/CVERecord?id=CVE-2024-47619
Sumbitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
MFH:		2025Q2
4dc6bda43e
Po-Chuan Hsieh (sunpoet) · 4.8.1_5
devel/grpc: Update to 1.70.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
9fb75f4dd4
Po-Chuan Hsieh (sunpoet) · 4.8.1_4
devel/grpc: Update to 1.69.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
b40b34536d
Muhammad Moinur Rahman (bofh) · 4.8.1_3
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Po-Chuan Hsieh (sunpoet) · 4.8.1_3
devel/grpc: Update to 1.68.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
ca283be5d0
Joseph Mingrone (jrm) · 4.8.1_2
Bump PORTREVISIONs after grpc shlib change in 2715f16944541b6b

PR:		282624
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D47513
b359e3699e
Po-Chuan Hsieh (sunpoet) · 4.8.1_1
devel/grpc: Update to 1.67.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
fab6d04576
Cy Schubert (cy) · 4.8.1
sysutils/syslog-ng: Update to 4.8.1

Updating to 4.8.1 brought in MQTT support. This broke packaging,
requring the addition of an MQTT option.

The patch in its entirety was provided by our upstream who maintains
packaging for various Linux distros and FreeBSD.

Submitted by:   Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
462d7cafdd
Po-Chuan Hsieh (sunpoet) · 4.8.0_2
devel/grpc: Update to 1.66.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
d53b4fb4a1
Po-Chuan Hsieh (sunpoet) · 4.8.0_1
devel/grpc: Update to 1.65.4

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases
e9a9fe7ceb
Cy Schubert (cy) · 4.8.0
sysutils/syslog-ng: Update to 4.8.0

Patch was created and tested by our upstream representative
Peter Czanik.

As Peter explains to me in an email this is the first version of
syslog-ng after the Axoflow fork.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
7d022898c7
Cy Schubert (cy) · 4.7.1
sysutils/syslog-ng: Fix whitespace

- Replace consecutive spaces with tabs.
- Remove unnecessary whitespace.

MFH:	2024Q4
0dab5ed53b
Cy Schubert (cy) · 4.7.1
sysutils/syslog-ng: Update to 4.7.1

Patch was created and tested by our upstream representative
Peter Czanik.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
e042c93794
Po-Chuan Hsieh (sunpoet) · 4.6.0_2
devel/grpc: Update to 1.62.0

- Bump PORTREVISION of dependent ports for shlib change
  Broken ports are skipped:
  - science/py-tensorflow
  - sysutils/apache-mesos

Changes:	https://github.com/grpc/grpc/releases
1947368c6b
Cy Schubert (cy) · 4.6.0_1
sysutils/syslog-ng: Move man pages

Patch was created and tested by our upstream representative
Peter Czanik.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
2b614efb26
Cy Schubert (cy) · 4.6.0
sysutils/syslog-ng: Update to 4.6.0

Patch was created and tested by our upstream representative
Peter Czanik.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
d7857e5c71
Muhammad Moinur Rahman (bofh) · 4.4.0
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
bbab7f59e9
Cy Schubert (cy) · 4.4.0
sysutils/syslog-ng: Fix plist error when building with PYTHON option

When building with python support:

---Begin OPTIONS List---
===> The following configuration options are available for syslog-ng-4.4.0:
[...]
     PYTHON=on: Build with Python 3.9 support

Some files are orphaned:

===> Checking for items in STAGEDIR missing from pkg-plist
Error: Orphaned: lib/syslog-ng/python/syslogng/__pycache__/reloc%%PYTHON_EXT_SUFFIX%%.pyc
Error: Orphaned: lib/syslog-ng/python/syslogng/reloc.py

The initial patch was created by romain@ and the updated patch came from
Peter Czanik, a syslog-ng developer.

PR:		274187
Submitted by:	Original patch by romain@
Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
                Balabit (a OneIdentity company) / syslog-ng upstream
		Updated patch
MFH:		2023Q4
af7d33c782
Cy Schubert (cy) · 4.4.0
sysutils/syslog-ng: Update to 4.4.0

Patch was created and tested by our upstream representative
Peter Czanik.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
a04904c8e5
Po-Chuan Hsieh (sunpoet) · 4.3.1
sysutils/syslog-ng: Clean up USES=python

Approved by:	portmgr (blanket)
With hat:	python
0675e9ad05
Cy Schubert (cy) · 4.3.1
sysutils/syslog-ng: Update to 4.3.0

Patch was created and tested by our upstream representative
Peter Czanik.

Version 4.3.1 of syslog-ng was released during the weekend: there was
a rare to appear crash bug in Python support (one needs to reference
the same Python parser multiple times in the configuration). Support
for OpenSearch was also added.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
ebb2ddb593
Cy Schubert (cy) · 4.3.0_1
sysutils/syslog-ng: Correct dependency

Syslog-ng now depends on devel/pcre2 instead of devel/pcre. This
was missed when upstream's patch updating the port was submitted.

PR:		272789
Fixes:		c0c1145055f0
d491ae3853
Cy Schubert (cy) · 4.3.0
sysutils/syslog-ng: Update to 4.3.0

Patch was created and tested by our upstream representative
Peter Czanik.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
c0c1145055
Charlie Li (vishwin) · 4.2.0
devel/py-setuptools: convert individual consumers to ${PY_SETUPTOOLS}

Currently a no-op, but in the future outputs the correct setuptools
port depending on whether USES_PYTHON=distutils is specified.

With hat: python
PR: 270510, 270358
9a80a6ee5e
Rene Ladan (rene) · 4.2.0
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Cy Schubert (cy) · 4.2.0
sysutils/syslog-ng: Update to 4.2.0

Patch was created and tested by our upstream Balabit representative
Peter Czanik.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
d47448c7fc
Cy Schubert (cy) · 4.1.1
sysutils/syslog-ng: Fix PYTHON=ON build

PYTHON=ON requires devel/py-setuptools to build properly.

PR:		270153
Submitted by:	Christian Ulrich <chris _AT_ chrullrich.net>
Reviewed by:	Peter Czanik <peter.czanik _AT_ balabit.com>
20f895af04
Cy Schubert (cy) · 4.1.1
sysutils/syslog-ng: Update to 3.38.1

Patch was created and tested by our upstream representative
Peter Czanik.

Syslog-ng developers develop for and test on Linux. The Syslog-ng has
been broken since 4.X. Peter Czanik, a Balabit employee, has been
maintaining a separate syslog-ng repo for FreeBSD until his patches
have been accepted by their development team. He will be using
the repo pointed to by the port until the FreeBSD issues are resolved.

Peter's extra effort is appreciated by the FreeBSD community.

Submitted by:	Peter Czanik (CzP) <peter.czanik@oneidentity.com>
		Balabit (a OneIdentity company) / syslog-ng upstream
643e6a9acd
Stefan Eßer (se) · 3.38.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.38.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0