textproc/py-elasticsearch7: Update to 7.17.13 - Update WWW Changes: https://github.com/elastic/elasticsearch-py/releases85c981928c
Port details
textproc/py-elasticsearch7 7.17.13
Official Python low-level client for Elasticsearch
Port info
- Maintainer
- sunpoet@FreeBSD.org
- Packages
- latest: 7.17.13
- Upstream
- up to date
- Last update
- to 7.17.13 · 85c981928c
- Quarterly
- 2026Q4: 7.17.13
- WWW
- https://www.elastic.co/docs/reference/elasticsearch/clients/python
- Links
- cgit · VuXML
Install
- Package
# pkg install py312-elasticsearch7installs 7.17.13 fromlatest; fromquarterly(2026Q4) 7.17.13- Port
# cd /usr/ports/textproc/py-elasticsearch7 && make install clean# make -C /usr/ports/textproc/py-elasticsearch7 config # change options first
- Size
- 247 KiB download · 4.3 MiB installed
- Depends on
- lang/python312 3.12.15, net/py-urllib3 2.8.0,1, security/py-certifi 2026.7.22, www/py-requests 2.34.2
- License
- APACHE20
- Options
- 1 of 2 on in the package: REQUESTS
Show the 1 options that are off
ASYNC
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 7.17.13 | 7.17.13 | – |
| FreeBSD 15 | 7.17.13 | 7.17.13 | – |
| FreeBSD 14 | 7.17.13 | 7.17.13 | 7.17.13 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 7.17.13 | 7.17.13 | – |
| FreeBSD 14 | 7.17.13 | 7.17.13 | 7.17.13 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (15)
The CVE record lists the packaged version 7.17.13 as affected, and no VuXML entry names the CVE. What does this mean?
Update to 7.17.25 fixes 8 of the 15 unaddressed CVEs within the 7.x branch.
5 CVEs name no fixed version in the CVE record (for example only a commit).
Fixed up to each version, cumulative: 7.17.16 2 · 7.17.19 3 · 7.17.21 4 · 7.17.23 5 · 7.17.24 7 · 7.17.25 8 · 8.15.1 9 · 8.19.19 10
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2025-37731 | 6.8 | 2025-12-15 | Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a … |
| CVE-2026-72683 | 6.5 | 2026-08-13 | A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elast… |
| CVE-2026-49090 | 6.5 | 2026-07-01 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a spe… |
| CVE-2025-68384 | 6.5 | 2025-12-18 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) c… |
| CVE-2024-52979 | 6.5 | 2025-05-01 | Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causin… |
| CVE-2024-52980 | 6.5 | 2025-04-08 | A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch n… |
| CVE-2024-43709 | 6.5 | 2025-01-21 | An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query usi… |
| CVE-2023-46673 | 6.5 | 2023-11-22 | It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline… |
| CVE-2025-37727 | 5.7 | 2025-10-10 | Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex A… |
| CVE-2026-102407 | 5.4 | 2026-10-06 | Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-… |
| CVE-2023-49921 | 5.2 | 2024-07-26 | An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored i… |
| CVE-2025-68390 | 4.9 | 2025-12-18 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Alloc… |
| CVE-2024-52981 | 4.9 | 2025-04-08 | An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackove… |
| CVE-2024-23444 | 4.9 | 2024-07-31 | It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the… |
| CVE-2024-23450 | 4.9 | 2024-03-27 | A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash. |
VuXML only (0)
Listed in VuXML, the packaged version 7.17.13 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (3)
textproc/py-elasticsearch7: Relax version requirement of RUN_DEPENDS - Bump PORTREVISION for package change5f2b41c551
textproc/py-elasticsearch7: Add py-elasticsearch7 7.17.12 (copied from py-elasticsearch) - Add PORTSCOUTbf937a70b8