CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

textproc/opensearch13 1.3.10_2

Full-text search engine for Java

1
unaddressed
0
VuXML only
0
fixed
1
open problem reports

Port info

Maintainer
opensearch@FreeBSD.org
Packages
latest: 1.3.10_2
Upstream
up to date
Last update
to 1.3.10_2 · 86813e9ccf
Quarterly
2026Q4: 1.3.10_2
WWW
https://opensearch.org
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install opensearch13
installs 1.3.10_2 from latest; from quarterly (2026Q4) 1.3.10_2
Port
# cd /usr/ports/textproc/opensearch13 && make install clean
# make -C /usr/ports/textproc/opensearch13 config  # change options first
Size
218 MiB download · 318 MiB installed
Depends on
devel/jna 5.15.0_4, java/openjdk25 25.0.4+7.f.1_1, shells/bash 5.3.20
License
APACHE20
Creates
user opensearch, group opensearch
Options
1 of 1 on in the package: PLUGINS
pkg-message
Shown after installing
Opensearch 1.3.x was installed

Please see /usr/local/etc/opensearch for a sample version of
opensearch.yml.

OpenSearch requires memory locking of large amounts of RAM.
You may need to set:

sysctl security.bsd.unprivileged_mlock=1

When running within a jail, it's highly advisable to set:

enforce_statfs = 1

for the jail running opensearch instance.

If OpenSearch was built with the PLUGINS option enabled (default) it will not
start until the security plugin is properly configured.  Please refer to the
OpenSearch documentation for setting-up TLS:

https://opensearch.org/docs/security-plugin/configuration/tls

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.3.10_21.3.10_2–
FreeBSD 151.3.10_21.3.10_2–
FreeBSD 141.3.10_21.3.10_21.3.10_2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.3.10_21.3.10_2–
FreeBSD 141.3.10_21.3.10_21.3.10_2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 1.3.10_2 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2025-96248.32025-11-25A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch versions …

VuXML only (0)

Listed in VuXML, the packaged version 1.3.10_2 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
294936maintainer-feedback? textproc/opensearch13: update to latest and pin Java version requirementIn Progress2026-07-16

Commits (6)

Ronald Klop (ronald) · 1.3.10_2
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 1.3.10_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Muhammad Moinur Rahman (bofh) · 1.3.10
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Romain Tartière (romain) · 1.3.10
textproc/opensearch13: Update to 1.3.10

Release notes:
https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-1.3.10.md

With hat:	opensearch
8dd336d9b0
Jose Alonso Cardenas Marquez (acm) · 1.3.9
textproc/opensearch13-*: Update to 1.3.9

ChangeLog at:	https://github.com/opensearch-project/OpenSearch/blob/main/release-notes/opensearch.release-notes-1.3.9.md
454a205f82
Jose Alonso Cardenas Marquez (acm) · 1.3.6
textproc/opensearch13: New port: Full-text search engine for Java (1.3.x branch)

OpenSearch is a fork of Elasticsearch which aims to be a Distributed,
RESTful, Search Engine built on top of Apache Lucene.
b698323219