Update to 7.11.0 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst07e45131fa
Port details
textproc/py-elasticsearch 9.5.1
Official Python low-level client for Elasticsearch
Port info
- Maintainer
- sunpoet@FreeBSD.org
- Packages
- latest: 9.5.1
- Upstream
- up to date
- Last update
- to 9.5.1 · 116161c662
- Quarterly
- 2026Q4: 9.5.1
- Formerly
- textproc/py-elasticsearch-py until 2017-12-21
- WWW
- https://www.elastic.co/docs/reference/elasticsearch/clients/python
- Links
- cgit · VuXML
Install
- Package
# pkg install py312-elasticsearchinstalls 9.5.1 fromlatest; fromquarterly(2026Q4) 9.5.1- Port
# cd /usr/ports/textproc/py-elasticsearch && make install clean# make -C /usr/ports/textproc/py-elasticsearch config # change options first
- Size
- 876 KiB download · 18 MiB installed
- Depends on
- devel/py-anyio 4.15.1, devel/py-python-dateutil 2.9.0, devel/py-sniffio 1.3.1, devel/py-typing-extensions 4.16.0, lang/python312 3.12.15, textproc/py-elastic-transport 9.4.2, www/py-requests 2.34.2
- License
- APACHE20
- Options
- 1 of 2 on in the package: REQUESTS
Show the 1 options that are off
ASYNC
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 9.5.1 | 9.5.1 | – |
| FreeBSD 15 | 9.5.1 | 9.5.1 | – |
| FreeBSD 14 | 9.5.1 | 9.5.1 | 9.5.1 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 9.5.1 | 9.5.1 | – |
| FreeBSD 14 | 9.5.1 | 9.5.1 | 9.5.1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (16)
The CVE record lists the packaged version 9.5.1 as affected, and no VuXML entry names the CVE. What does this mean?
Update to 9.5.5 fixes all 16 unaddressed CVEs.
Fixed up to each version, cumulative: 9.5.2 1 · 9.5.3 4 · 9.5.4 10 · 9.5.5 16
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-103007 | 7.2 | 2026-10-06 | Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during aut… |
| CVE-2026-103009 | 7.1 | 2026-10-06 | Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that … |
| CVE-2026-103008 | 6.5 | 2026-10-06 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply … |
| CVE-2026-102411 | 6.5 | 2026-10-06 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). Elasticsearch enforce… |
| CVE-2026-103005 | 6.5 | 2026-10-06 | Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with con… |
| CVE-2026-103006 | 6.5 | 2026-10-06 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of th… |
| CVE-2026-102404 | 6.5 | 2026-10-06 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can … |
| CVE-2026-102409 | 6.5 | 2026-10-06 | Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service,… |
| CVE-2026-94396 | 6.5 | 2026-09-26 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94397 | 6.5 | 2026-09-26 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94398 | 6.5 | 2026-09-26 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94399 | 6.5 | 2026-09-26 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-82294 | 6.5 | 2026-09-26 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). |
| CVE-2026-82300 | 6.5 | 2026-09-26 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). |
| CVE-2026-94408 | 4.9 | 2026-09-26 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-102408 | 4.3 | 2026-10-06 | Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponential Blowup (CAPEC-492). The ES|QL CHUN… |
VuXML only (0)
Listed in VuXML, the packaged version 9.5.1 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (6)
Show 6 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-72642 | 8.8 | 2026-08-13 | The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset… |
| CVE-2026-72686 | 6.5 | 2026-08-13 | A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component val… |
| CVE-2026-72687 | 6.5 | 2026-08-13 | A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and dese… |
| CVE-2026-72678 | 6.5 | 2026-08-13 | Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure. An authenticate… |
| CVE-2026-72639 | 6.5 | 2026-08-13 | Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accoun… |
| CVE-2026-72645 | 6.5 | 2026-08-13 | Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding … |
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (94)
Drop python 2.7 support from a few ports With hat: portmgraa7a6c429e
Update to 7.10.1 - Convert to test framework - Fix TEST_DEPENDS Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst16c8eadf17
Update to 7.10.0 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rstcf47569620
Update to 7.9.1 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst65e40e9915
Update to 7.9.0 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst8a40b934bf
Update to 7.8.1 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst72f60c6004
Add ASYNC option034306ab76
Update to 7.8.0 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst91f6d65760
Update to 7.7.1 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst643206b465
Update to 7.7.0 - Add LICENSE_FILE Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rstc58297311d
Update to 7.6.0 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst7769977169
Update to 7.5.1 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rstbb5e765a53
Update to 7.1.0 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst814d7e3fce
Update to 7.0.5 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rstb445c06a39
Update to 7.0.4 - Update version requirement of *_DEPENDS Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst https://github.com/elastic/elasticsearch-py/blob/7.0.4/Changelog.rst4923b8f2bb
Update to 6.4.0 Changes: https://github.com/elastic/elasticsearch-py/blob/6.x/Changelog.rst59768e79b8
Cosmetic changeb586ec1aa1
Add TEST_DEPENDS5dd1ad6800
Update to 6.3.1 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rstdd4670d654
Update to 6.3.0 - Add REQUESTS option Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst0f09c333c3
Use PY_FLAVOR for dependencies. FLAVOR is the current port's flavor, it should not be used outside of this scope. Sponsored by: Absolight4376dbbb58
Update to 6.2.0 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst38d0c54b17
Update to 6.1.1 Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rst1fa6bb4643
Update to 6.0.0 - Update pkg-descr - Update WWW Changes: https://github.com/elastic/elasticsearch-py/blob/master/Changelog.rstf9cb2d25a5
Move textproc/py-elasticsearch-py to textproc/py-elasticsearch - Change MASTER_SITES from GitHub to CHEESESHOP - Update dependent ports: - Update RUN_DEPENDS - Bump PORTREVISION for dependency change - Take maintainership36898895fc
- Reassign MAINTAINER to ports@b288278834
Convert Python ports to FLAVORS.
Ports using USE_PYTHON=distutils are now flavored. They will
automatically get flavors (py27, py34, py35, py36) depending on what
versions they support.
There is also a USE_PYTHON=flavors for ports that do not use distutils
but need FLAVORS to be set. A USE_PYTHON=noflavors can be set if
using distutils but flavors are not wanted.
A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
added to cope with Python ports that did not have the Python
PKGNAMEPREFIX but are flavored.
USES=python now also exports a PY_FLAVOR variable that contains the
current python flavor. It can be used in dependency lines when the
port itself is not python flavored. For example, deskutils/calibre.
By default, all the flavors are generated. To only generate flavors
for the versions in PYTHON2_DEFAULT and PYTHON3_DEFAULT, define
BUILD_DEFAULT_PYTHON_FLAVORS in your make.conf.
In all the ports with Python dependencies, the *_DEPENDS entries MUST
end with the flavor so that the framework knows which to build/use.
This is done by appending '@${PY_FLAVOR}' after the origin (or
@${FLAVOR} if in a Python module with Python flavors, as the content
will be the same). For example:
RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>0:devel/py-six@${PY_FLAVOR}
PR: 223071
Reviewed by: portmgr, python
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D12464551be3c723- Update to 5.4.0a00726f8b8
- Update to 5.1.08a8b9e4b7d
- Update to 5.0.0a206c32e73
Update textproc/py-elasticsearch-py to version 2.4.0; add NO_ARCH. PR: 211986 Submitted by: olgeni Approved by: maintainer75c86ef90a
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight597afc47baUpdate textproc/py-elasticsearch-py to version 2.3.0. PR: 208395 Submitted by: olgeni Approved by: maintainer0d2f254ce9
- Update to 2.2.022b80dc71c
Upgrade textproc/py-elasticsearch-py to 1.8.0. PR: 203756 Submitted by: olgeni Approved by: maintainer1eb31cc188
Upgrade textproc/py-elasticsearch-py to 1.7.0. PR: 203254 Submitted by: olgeni Approved by: maintainer1acc380e85
- Update to 1.6.0 PR: 201090 Submitted by: olgeni@31773bc862
- Update to 1.5.0 PR: 200566 Submitted by: olgeni@FreeBSD.org01a8311e53
Update ports in the remaining categories to not use GH_COMMIT. With minor cleanups to make things simpler. With hat: portmgr Sponsored by: Absolightfb4deed873
- Update to 1.3.0 PR: 197173 Submitted by: antoine@e74a645f61
- Convert textproc/ to USES=python With hat: python@1fd066ebe5
- Add missing PKGNAMEPREFIX - Bump PORTREVISION518cd87fa5
New port: textproc/py-elasticsearch-py: Official low-level client for Elasticsearch. It's goal is to provide common ground for all Elasticsearch-related code in Python; because of this it tries to be opinion-free and very extendable. WWW: http://elasticsearch-py.readthedocs.org/en/master/e593f550ec