3 of 6 on in the package: DOCSHOSTINFOIPV6Show the 3 options that are off
DECODEUTFKEYSGEOIPFREEJSON
pkg-message
Shown after installing
Use /usr/local/www/awstats/tools/awstats_configure.pl to set up your
hosts.
To activate awstats in your webserver, see the example files for
apache: /usr/local/share/doc/awstats/httpd_conf
nginx: /usr/local/share/doc/awstats/nginx/
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
8.0_1,1
8.0_1,1
–
FreeBSD 15
8.0_1,1
8.0_1,1
–
FreeBSD 14
8.0_1,1
8.0_1,1
8.0_1,1
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
8.0_1,1
8.0_1,1
–
FreeBSD 14
8.0_1,1
8.0_1,1
8.0_1,1
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 8.0_1,1.
Fixed (8)
Show 8 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (83)
Vladimir Druzenko (vvd) · 8.0_1,1
www/awstats: Remove awdownloadcsv.pl (security vuln)
Problem:
awdownloadcsv.pl is vulnerable to command injection and path traversal,
ref [1] and [2].
The GitHub issue [1] mentions that it is deprecated, and the readme does
not list this file among the files that are (supposed to be) part of the
distribution.
Solution:
This commit prevents awdownloadcsv.pl to be installed, thus removing the
vulnerability.
[1] https://github.com/eldy/AWStats/issues/276
[2] https://www.openwall.com/lists/oss-security/2026/03/08/8
While here, clean up sorting of IPV6_RUN_DEPENDS.
PR: 293698
MFH: 2026Q1
www/awstats: Replace post-patch-JSON-on with post-patch-JSON-off
We have to remove these 2 lines if JSON is disabled.
PR: 289419
Fixes: ddc678c6a7e2 (Update 7.9 => 8.0)
www/awstats: Update 7.9 => 8.0
Changelog:
- Better CSS
- Update robots.pm
- Fixes #248
- Update Traditional Chinese translation and migrate it to UTF-8
- Sorting tree: Check if the key exists. Do not care about its value.
- Allow processing logs in json
- Fix default setup for NotPageList
- Add report about request time
- Fix bad link into doc
- Remove native Android and native iOS/OSX Browser's User Agents from robots.pm
- GPTBot not being properly identified due to error in robots.pm
- Incorrect encoding for Ukrainian Translation
https://github.com/eldy/AWStats/blob/AWSTATS_8_0/docs/awstats_changelog.txt
Improve port:
- Optimize goals - reduce the number of invokes of MKDIR and
INSTALL_SCRIPT.
- Replace PORTVERSION with DISTVERSION.
- Sort DOS2UNIX_GLOB.
- Add option JSON.
PR: 289419
Approved by: Vidar Karlsen <vidar@karlsen.tech>
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
www/awstats: update to 7.9
ChangeLog: https://awstats.sourceforge.io/docs/awstats_changelog.txt
* Add Windows 11 and Android 13 operating systems
* Update Hungarian translation and migrate it to UTF-8.
* fix cross site scripting
* Replace hard coded text with $Message ( Monthly, Daily, Hourly )
* Android 11 + 12, MacOS 11 ( Big Sur ) + 12 ( Monterey )
* Catch up german translations
* Change the substitution that replaces newlines with BR elements so that
the syntax works for both HTML and XHTML.
* Added a few robots and 1 phone browser. Also corrected some errors in
devlop robots.pm
* Only look for configuration in dedicated awstats directories
* Unwrap SRS e-mail addresses
* Fixes #195/CVE-2020-35176
* As geoip2_country doesn't have AddHTMLGraph_geoip2_country, it should
only generate subpage for geoip2_city.
* added support for HaikuOS and Safari based WebPositive browser
* Adding missing td-tag opening
* Tajik Language Support
PR: 269051
Reported by: vidar@karlsen.tech (maintainer)
MFH: 2023Q1 (security fixes)
Security: CVE-2020-35176
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
Update to 7.5. While here, completely rewrite the Makefile. Use sed instead of hard patches to minimize maintainership, and drastically simplify the installation process. Add some OPTIONS to handle dependencies on country lookups.
Previously, the path to the icons was being manually changed from
".../icon" to ".../icons". With this update, the port now installs
into the default location (.../icon). The awstatsicons alias will
need to be manually updated for existing installations; this is
explained in UPDATING.
Also, I am taking this port from the previous maintainer. It has
been over two years since he responded to a PR, and this is the
third in a row that has had no response. Under section 5.5 of the
PHB, I am considering this port to be abandoned. I'd like to thank
Alex for all the time that he did spend maintaining this port.
PR: 210821
Approved by: maintainer timeout (2 weeks)
Update to 7.1.1.
CHANGES:
- Add windows 8 detection
- Add support of %time5 for iso date times.
- Fix problems with Perl 5.14
PR: ports/177757
Submitted by: Frank Wall <fw@moov.de>
Approved by: maintainer timeout (38 days)
- Perl 5.14 changes format of compiled regexps. This update amends the pattern awstats uses to parse compiled regexps to cater for the new 5.14 format
PR: ports/158837
Submitted by: Jase Thew <freebsd@beardz.net>
Approved by: Alex Samorukov <samm@os2.kiev.ua> (maintainer)
- Tweak upstream configure script to run on FreeBSD [1] - Replace spaces with tabs to pacify portlint
PR: ports/153449 [1]
Submitted by: Chris Petrik <c.petrik.sosa@gmail.com>
Approved by: Alex Samorukov <samm@os2.kiev.ua> (maintainer)
Feature safe: yes
- Update to 6.9 Changes 6.9: New features/improvements: - With postfix that support DSN (Delivery Status Notifications) we exclude some lines to avoid counting mails twice in maillogconvert.pl script. - Logresolvemerge.pl support FreeRADIUS logs or anything else using (the fixed length!) ctime format timestamp. - Add option stoponfirsteof in logresolvemerge tool.
Fixes:
- Fixed broken maxmind citi, org and isp plugins.
- Remove in name html tag to have HtmlHeadSection first.
- Fix: [ 2001151 ] Security fix.
- Fix: [ 2038681 ] missing <br _/_> in plugins/geoip_org_maxmind.pm
- Fix: [ 1921942 ] html footer is missing from the allextraN report.
- Fix: [ 1943466 ] error geoip_city_maxmind Can't locate object method "record_
- Fix: [ 1808277 ] Incorrect function call in geoip_isp_maxmind.pm
- Fix: Full list of extrasections was not ordered correctly
- A lot of other fixes.
- Added missing icons
Other/Documentation:
- None
- Fix CVE-2008-3714 from the upstream
(Sec: Enhance security of sanitizing parameters)
http://awstats.cvs.sourceforge.net/viewvc/awstats/awstats/wwwroot/cgi-bin/awstats.pl?r1=1.925&r2=1.926
PR: ports/129957,
ports/130143
Submitted by: Eygene Ryabinkin <rea-fbsd _at\ codelabs.ru>,
Naram Qashat <cyberbotx -at\ cyberbotx.com>
Approved by: Alex Samorukov (maintainer)
Security: http://secunia.com/advisories/31519
- revert earlier commit, as version 6.6 is not a stable version, and developer is continuesly re-rolling tarball. In addition, the application fails to run.
Requested by: maintainer