CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/openbao 2.6.2_3

Tool for securely accessing secrets

0
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
jake@metalrip.com
Packages
latest: 2.6.2_3
Upstream
Higher version available: 2.7.1
Last update
to 2.6.2_3 · d81b7ba3c3
Quarterly
2026Q4: 2.6.2_3 · last MFH 60647eff54
WWW
https://openbao.org/
Links
cgit · VuXML

Install

Package
# pkg install openbao
installs 2.6.2_3 from latest; from quarterly (2026Q4) 2.6.2_3
Port
# cd /usr/ports/security/openbao && make install clean
Size
27 MiB download · 122 MiB installed
Depends on
nothing
License
MPL20
Creates
user openbao, group openbao
pkg-message
Shown after installing
The openbao user created by the bao package is now a member of the daemon
class, which will allow it to use mlock() when started by the rc script. This
will not be reflected in systems where the user already exists. Please add the
bao user to the daemon class manually by running:

pw usermod -L daemon -n openbao

or delete the user and reinstall the package.

You may also need to increase memorylocked for the daemon class in
/etc/rc.conf to more than 1024M (the default) or more:

openbao_limits_mlock="2048M"

Or to disable mlock, add:

disable_mlock = 1

to /usr/local/etc/openbao.hcl

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.6.2_32.6.2_2–
FreeBSD 152.6.2_32.6.2_2–
FreeBSD 142.6.2_32.6.2_22.6.2_3

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.6.2_32.6.2_2–
FreeBSD 142.6.2_32.6.2_22.6.2_3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.6.2_3.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (31)

Dag-Erling Smørgrav (des) · 2.6.2_3 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Adam Weinberger (adamw) · 2.6.2_1
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Vladimir Druzenko (vvd) · 2.6.2 MFH 2026Q3 ✓
security/openbao: Update 2.6.1 => 2.6.2

Changelog:
https://github.com/openbao/openbao/blob/v2.6.2/CHANGELOG.md

PR:		297666
Security:	GHSA-rh46-vc3j-w2w3
Security:	GHSA-g892-p242-8g86
Sponsored by:	UNIS Labs
MFH:		2026Q3
5bfe8bc273
Dag-Erling Smørgrav (des) · 2.6.1_2 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 2.6.1_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Yusuf Yaman (nxjoseph) · 2.6.1 MFH 2026Q3 ✓
security/openbao: Update 2.6.0 => 2.6.1

Changelog:
https://github.com/openbao/openbao/releases/tag/v2.6.1

PR:		297120
Reported by:	jake@metalrip.com (maintainer)
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q3
8bd1e3659f
Vladimir Druzenko (vvd) · 2.6.0 MFH 2026Q3 ✓
security/openbao: Update 2.5.5 => 2.6.0 (fix multiple vulnerabilities)

Changelog:
https://github.com/openbao/openbao/releases/tag/v2.6.0

PR:		296644
Approved by:	jake@metalrip.com (maintainer)
Security:	GHSA-444v-8vxr-p36h
Security:	GHSA-34fc-gh42-pj53
Security:	GHSA-xp3c-3jw3-4vcr
Security:	GHSA-59w7-v8rr-pr4p
Sponsored by:	UNIS Labs
MFH:		2026Q3
46cd56f05b
Vladimir Druzenko (vvd) · 2.5.5 MFH 2026Q3 ✓
security/openbao: Update 2.4.1 => 2.5.5 (fix 17 CVE + 5 GHSA)

Changelogs:
https://github.com/openbao/openbao/releases/tag/v2.4.3
https://github.com/openbao/openbao/releases/tag/v2.4.4
https://github.com/openbao/openbao/releases/tag/v2.5.0
https://github.com/openbao/openbao/releases/tag/v2.5.1
https://github.com/openbao/openbao/releases/tag/v2.5.2
https://github.com/openbao/openbao/releases/tag/v2.5.3
https://github.com/openbao/openbao/releases/tag/v2.5.4
https://github.com/openbao/openbao/releases/tag/v2.5.5

PR:		296644
Approved by:	jake@metalrip.com (maintainer)
Security:	CVE-2025-62513
Security:	CVE-2025-62705
Security:	CVE-2025-64761
Security:	CVE-2025-5999
Security:	CVE-2025-68121
Security:	CVE-2026-24051
Security:	CVE-2026-33757
Security:	CVE-2026-33758
Security:	CVE-2026-39946
Security:	GHSA-vv66-6rp4-wr4f
Security:	CVE-2026-39396
Security:	CVE-2026-3605
Security:	CVE-2026-5807
Security:	CVE-2026-40264
Security:	CVE-2026-39388
Security:	CVE-2026-45808
Security:	CVE-2026-46405
Security:	CVE-2026-46358
Security:	GHSA-mwr2-wmgp-crj6
Security:	GHSA-c36x-h252-g9x2
Security:	GHSA-8w8f-r2xv-4q4j
Security:	GHSA-6mwx-4547-5vc9
Sponsored by:	UNIS Labs
MFH:		2026Q3
b089fb0928
Dag-Erling Smørgrav (des) · 2.4.1_12 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 2.4.1_11
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 2.4.1_10
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 2.4.1_9
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Adam Weinberger (adamw) · 2.4.1_8
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 2.4.1_7
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 2.4.1_6
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 2.4.1_5
various: Bump Go ports for 1.24.12
013f2d30b0
Adam Weinberger (adamw) · 2.4.1_4
various: Bump Go ports for 1.24.11
b24429e3ed
Adam Weinberger (adamw) · 2.4.1_3
various: Bump Go ports for 1.24.10
0dfced16fb
Adam Weinberger (adamw) · 2.4.1_2
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 2.4.1_1
many: Bump dependent ports after go124 update
2e7587aaf8
Vladimir Druzenko (vvd) · 2.4.1
security/openbao: Update 2.1.0 => 2.4.1

Changelogs:
https://github.com/openbao/openbao/releases/tag/v2.1.1
https://github.com/openbao/openbao/releases/tag/v2.2.0
https://github.com/openbao/openbao/releases/tag/v2.2.1
https://github.com/openbao/openbao/releases/tag/v2.2.2
https://github.com/openbao/openbao/releases/tag/v2.3.1
https://github.com/openbao/openbao/releases/tag/v2.3.2
https://github.com/openbao/openbao/releases/tag/v2.4.0
https://github.com/openbao/openbao/releases/tag/v2.4.1

PR:		289935
Approved by:	jake@metalrip.com (maintainer)
Security:	CVE-2025-4166
Security:	CVE-2025-52894
Security:	CVE-2025-4656
Security:	CVE-2025-52893
Security:	CVE-2025-6000
Security:	CVE-2025-54997
Security:	CVE-2025-6015
Security:	CVE-2025-55003
Security:	CVE-2025-6011
Security:	CVE-2025-54999
Security:	CVE-2025-6010
Security:	CVE-2025-6004
Security:	CVE-2025-54998
Security:	CVE-2025-6013
Security:	CVE-2025-55001
Security:	CVE-2025-5999
Security:	CVE-2025-54996
Security:	CVE-2025-6014
Security:	CVE-2025-55000
Security:	CVE-2025-6203
Security:	CVE-2025-59043
MFH:		2025Q3
dfe31d8c29
Adam Weinberger (adamw) · 2.1.0_5
go123 ports: Bump for 1.23.12
b6703954e3
Adam Weinberger (adamw) · 2.1.0_4
go: Bump ports for go124 update
a4e30d4f4f
Adam Weinberger (adamw) · 2.1.0_3
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 2.1.0_2
all: Bump after lang/go123 update

PR:		284681
f9fbe03c69
Ashish SHUKLA (ashish) · 2.1.0_1
all: Bump after lang/go123 update

MFH:		2025Q1
ca07a602a8
Zsolt Udvari (uzsolt) · 2.1.0
security/openbao: Update to 2.1.0

Use go 1.23.

Changelog: https://github.com/openbao/openbao/releases/tag/v2.1.0

PR:		283071
Approved by:	submitter is maintainer
9c8e7bad8d
Ashish SHUKLA (ashish) · 2.0.1_1
all: Bump after lang/go122 update

PR:		281842
79271d5381
Vladimir Druzenko (vvd) · 2.0.1
security/openbao: Update GITID

GITID was from 2.0.0 - update it to 2.0.1.

PR:	280619
Fixes:	a9cd810269d1 (New port: open source, community-driven fork of Vault)
d0c3c2c020
Vladimir Druzenko (vvd) · 2.0.1
security/openbao: New port: open source, community-driven fork of Vault

OpenBao exists to provide a software solution to manage, store, and
distribute sensitive data including secrets, certificates, and keys.
The OpenBao community intends to provide this software under an
OSI-approved open-source license, led by a community run under open
governance principles.

https://openbao.org
https://github.com/openbao/openbao

PR:	280619
a9cd810269