Packages / Debian 13 (Trixie) / admin / syslog-ng

Package: syslog-ng (4.8.1-5+deb13u1)

Enhanced system logging daemon (metapackage)

Other Packages Related to syslog-ng:

dep: [syslog-ng-core] (>= 4.8.1)
Enhanced system logging daemon (core)
dep: [syslog-ng-scl]
Enhanced system logging daemon (scl files)
dep: [syslog-ng-mod-sql]
Enhanced system logging daemon (SQL plugin)
dep: [syslog-ng-mod-mongodb]
Enhanced system logging daemon (MongoDB plugin)

rec: [syslog-ng-mod-amqp]
Enhanced system logging daemon (AMQP plugin)
rec: [syslog-ng-mod-geoip2]
Enhanced system logging daemon (GeoIP2 plugin)
rec: [syslog-ng-mod-redis]
Enhanced system logging daemon (Redis plugin)
rec: [syslog-ng-mod-stomp]
Enhanced system logging daemon (STOMP plugin)
rec: [syslog-ng-mod-riemann]
Enhanced system logging daemon (Riemann destination)
rec: [syslog-ng-mod-graphite]
Enhanced system logging daemon (graphite plugin)
rec: [syslog-ng-mod-python]
Enhanced system logging daemon (Python plugin)
rec: [syslog-ng-mod-add-contextual-data]
Enhanced system logging daemon (add-contextual-data plugin)
rec: [syslog-ng-mod-stardate]
Enhanced system logging daemon (stardate plugin)
rec: [syslog-ng-mod-snmp]
Enhanced system logging daemon (SNMP plugin)
rec: [syslog-ng-mod-xml-parser]
Enhanced system logging daemon (xml parser plugin)
rec: [syslog-ng-mod-http]
Enhanced system logging daemon (HTTP destination)
rec: [syslog-ng-mod-rdkafka]
Enhanced system logging daemon (Kafka destination, based on librdkafka)
rec: [syslog-ng-mod-examples]
Enhanced system logging daemon (example plugins)
rec: [syslog-ng-mod-slog]
Enhanced system logging daemon (secure logging plugin)

Download syslog-ng

Architecture	Package size	Installed size	Files	Package
all	19 KiB	114 KiB	list of files	Download

Package file paths (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 13 (Trixie) in the browser Build an image that includes syslog-ng

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
4.8.1-5+deb13u1	trixie / main	all	Debian 13 · main · amd64	19 KiB	114 KiB	pool/main/s/syslog-ng/syslog-ng_4.8.1-5+deb13u1_all.deb
4.8.1-5+deb13u1	trixie / main	all	Debian 13 · main · arm64	19 KiB	114 KiB	pool/main/s/syslog-ng/syslog-ng_4.8.1-5+deb13u1_all.deb

Field source: Debian 13 (Trixie) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2026-39879] Published: Jul 20, 2026, 4:57:32 PM UTC Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslog-ng before 4.12 are	High(7.1)	Affected Details (2) `4.8.1-5+deb13u1` · all · trixie Affected nvd · syslog-ng · debian · 13 `4.8.1-5+deb13u1` · all · trixie Affected nvd · syslog-ng · debian · 13

[CVE-2026-39879]

Published: Jul 20, 2026, 4:57:32 PM UTC

Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslog-ng before 4.12 are

High(7.1)

Affected

Details (2)

4.8.1-5+deb13u1 · all · trixie
Affected
nvd · syslog-ng · debian · 13
4.8.1-5+deb13u1 · all · trixie
Affected
nvd · syslog-ng · debian · 13

Fixed and unaffected versions (6)

CVE	Severity	Version impact
[CVE-2024-47619] Published: May 7, 2025, 4:15:21 PM UTC syslog-ng: CVE-2024-47619	High(7.5)	Fixed Details (2) `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `4.8.1-5` dsa · syslog-ng · debian · 13 `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `4.8.1-5` dsa · syslog-ng · debian · 13
[CVE-2011-1951] Published: Jul 11, 2011, 8:55:01 PM UTC syslog-ng: CVE-2011-1951	Medium	Fixed Details (2) `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `3.2.4-1` dsa · syslog-ng · debian · 13 `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `3.2.4-1` dsa · syslog-ng · debian · 13
[CVE-2011-0343] Published: Jan 28, 2011, 4:00:03 PM UTC syslog-ng: CVE-2011-0343	Medium	Fixed Details (2) `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `3.1.3-2` dsa · syslog-ng · debian · 13 `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `3.1.3-2` dsa · syslog-ng · debian · 13
[CVE-2008-5110] Published: Nov 17, 2008, 10:21:27 PM UTC syslog-ng: CVE-2008-5110	Low	Fixed Details (2) `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `2.0.9-4.1` dsa · syslog-ng · debian · 13 `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `2.0.9-4.1` dsa · syslog-ng · debian · 13
[CVE-2007-6437] Published: Dec 19, 2007, 9:46:00 PM UTC syslog-ng: CVE-2007-6437	Medium	Fixed Details (2) `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `2.0.6-1` dsa · syslog-ng · debian · 13 `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `2.0.6-1` dsa · syslog-ng · debian · 13
[CVE-2002-1200] Published: Oct 15, 2002, 12:00:00 AM UTC syslog-ng: CVE-2002-1200	Medium	Fixed Details (2) `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `1.5.21-1` dsa · syslog-ng · debian · 13 `4.8.1-5+deb13u1` · all · trixie Fixed · Fixed: `1.5.21-1` dsa · syslog-ng · debian · 13

Last synced: Oct 28, 2026, 6:35:56 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.8.1-5+deb13u1 / allObserved Sep 1, 2026sha256 c61121898763…4f8960b6Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): c611218987638e364956c7c097a4807a97ae748295a2e983f9346e744f8960b6

Verify download

printf '%s  %s\n' 'c611218987638e364956c7c097a4807a97ae748295a2e983f9346e744f8960b6' 'syslog-ng_4.8.1-5+deb13u1_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

4.8.1-5+deb13u1 / allObserved Sep 1, 2026sha256 c61121898763…4f8960b6Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): c611218987638e364956c7c097a4807a97ae748295a2e983f9346e744f8960b6

Verify download

printf '%s  %s\n' 'c611218987638e364956c7c097a4807a97ae748295a2e983f9346e744f8960b6' 'syslog-ng_4.8.1-5+deb13u1_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Sources

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified