git: 372fe1199219 - 2026Q3 - security/openbao: Update 2.4.1 => 2.5.5 (fix 17 CVE + 5 GHSA)

From: Vladimir Druzenko <vvd_at_FreeBSD.org>
Date: Wed, 15 Jul 2026 20:00:56 UTC
The branch 2026Q3 has been updated by vvd:

URL: https://cgit.FreeBSD.org/ports/commit/?id=372fe1199219318330f2b1a29ad92bb2d457d34e

commit 372fe1199219318330f2b1a29ad92bb2d457d34e
Author:     Bartosz Kostka <sonidiff@gmail.com>
AuthorDate: 2026-07-15 19:54:30 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2026-07-15 20:00:32 +0000

    security/openbao: Update 2.4.1 => 2.5.5 (fix 17 CVE + 5 GHSA)
    
    Changelogs:
    https://github.com/openbao/openbao/releases/tag/v2.4.3
    https://github.com/openbao/openbao/releases/tag/v2.4.4
    https://github.com/openbao/openbao/releases/tag/v2.5.0
    https://github.com/openbao/openbao/releases/tag/v2.5.1
    https://github.com/openbao/openbao/releases/tag/v2.5.2
    https://github.com/openbao/openbao/releases/tag/v2.5.3
    https://github.com/openbao/openbao/releases/tag/v2.5.4
    https://github.com/openbao/openbao/releases/tag/v2.5.5
    
    PR:             296644
    Approved by:    jake@metalrip.com (maintainer)
    Security:       CVE-2025-62513
    Security:       CVE-2025-62705
    Security:       CVE-2025-64761
    Security:       CVE-2025-5999
    Security:       CVE-2025-68121
    Security:       CVE-2026-24051
    Security:       CVE-2026-33757
    Security:       CVE-2026-33758
    Security:       CVE-2026-39946
    Security:       GHSA-vv66-6rp4-wr4f
    Security:       CVE-2026-39396
    Security:       CVE-2026-3605
    Security:       CVE-2026-5807
    Security:       CVE-2026-40264
    Security:       CVE-2026-39388
    Security:       CVE-2026-45808
    Security:       CVE-2026-46405
    Security:       CVE-2026-46358
    Security:       GHSA-mwr2-wmgp-crj6
    Security:       GHSA-c36x-h252-g9x2
    Security:       GHSA-8w8f-r2xv-4q4j
    Security:       GHSA-6mwx-4547-5vc9
    Sponsored by:   UNIS Labs
    MFH:            2026Q3
    
    (cherry picked from commit b089fb0928f489d304ecbe6bd972f357255d0e21)
---
 security/openbao/Makefile |  6 +++---
 security/openbao/distinfo | 32 +++++++++++++++++---------------
 2 files changed, 20 insertions(+), 18 deletions(-)

diff --git a/security/openbao/Makefile b/security/openbao/Makefile
index cf2c16b1d025..6ee60955a0cb 100644
--- a/security/openbao/Makefile
+++ b/security/openbao/Makefile
@@ -1,7 +1,6 @@
 PORTNAME=	openbao
 DISTVERSIONPREFIX=	v
-DISTVERSION=	2.4.1
-PORTREVISION=	12
+DISTVERSION=	2.5.5
 CATEGORIES=	security
 MASTER_SITES+=	https://raw.githubusercontent.com/${PORTNAME}/${PORTNAME}/${DISTVERSIONFULL}/
 DISTFILES=	go.mod \
@@ -9,6 +8,7 @@ DISTFILES=	go.mod \
 		api/auth/approle/go.mod \
 		api/auth/kubernetes/go.mod \
 		api/auth/userpass/go.mod \
+		helper/stubbolt/go.mod \
 		sdk/go.mod
 
 MAINTAINER=	jake@metalrip.com
@@ -37,7 +37,7 @@ GROUPS=		${PORTNAME}
 PLIST_FILES=	bin/${BIN_NAME}
 
 BIN_NAME=		bao
-GITID=			efb9efa12f550e8322f3cec040862355e966f565
+GITID=			028992583c693c4de6350b8aa52ff85e30375a99
 SOURCE_DATE_EPOCH=	${TIMEEPOCHNOW:gmtime}
 TIMEEPOCHNOW=		%Y-%m-%dT%H:%M:%SZ
 
diff --git a/security/openbao/distinfo b/security/openbao/distinfo
index fb9e94011d6e..ea95d92ae8e1 100644
--- a/security/openbao/distinfo
+++ b/security/openbao/distinfo
@@ -1,15 +1,17 @@
-TIMESTAMP = 1759304389
-SHA256 (go/security_openbao/openbao-openbao-v2.4.1_GH0/go.mod) = ea189356b4c13872d79e3966f0014901237783b5ad137788f26435f45900efde
-SIZE (go/security_openbao/openbao-openbao-v2.4.1_GH0/go.mod) = 18705
-SHA256 (go/security_openbao/openbao-openbao-v2.4.1_GH0/api/go.mod) = 60a1ac8f4f20a408d77099fcd89f6b5534755748e5e4644e95d609a7c76a168e
-SIZE (go/security_openbao/openbao-openbao-v2.4.1_GH0/api/go.mod) = 1698
-SHA256 (go/security_openbao/openbao-openbao-v2.4.1_GH0/api/auth/approle/go.mod) = 16c1d35f624f21049ec5f175f9dad8c0f3fb3ac247f9b3444a4932e7b27d2c3f
-SIZE (go/security_openbao/openbao-openbao-v2.4.1_GH0/api/auth/approle/go.mod) = 1087
-SHA256 (go/security_openbao/openbao-openbao-v2.4.1_GH0/api/auth/kubernetes/go.mod) = 8bf6b245793725b07fc6e152a2d707e34a28895a560b401ce8e7fd209c5789ca
-SIZE (go/security_openbao/openbao-openbao-v2.4.1_GH0/api/auth/kubernetes/go.mod) = 1090
-SHA256 (go/security_openbao/openbao-openbao-v2.4.1_GH0/api/auth/userpass/go.mod) = 000b76a1b52e94f97a90645003d164652c66adf7511c2b1f9fc4e9dee8b1b383
-SIZE (go/security_openbao/openbao-openbao-v2.4.1_GH0/api/auth/userpass/go.mod) = 1088
-SHA256 (go/security_openbao/openbao-openbao-v2.4.1_GH0/sdk/go.mod) = 2a4a4b60af7a05c7b67a09ca1fe1a011f0eaca8cf3b086225eaf4dabf54044be
-SIZE (go/security_openbao/openbao-openbao-v2.4.1_GH0/sdk/go.mod) = 5570
-SHA256 (go/security_openbao/openbao-openbao-v2.4.1_GH0/openbao-openbao-v2.4.1_GH0.tar.gz) = 51755264feea4924c1ee91780c13312a7f762da7ba01f1ac8bc4bf74734fe322
-SIZE (go/security_openbao/openbao-openbao-v2.4.1_GH0/openbao-openbao-v2.4.1_GH0.tar.gz) = 23530108
+TIMESTAMP = 1783525300
+SHA256 (go/security_openbao/openbao-openbao-v2.5.5_GH0/go.mod) = 036c1025703c926561db1e4bcb26dc94ccda0e6b5c197f2e9d3c8aa49c77d814
+SIZE (go/security_openbao/openbao-openbao-v2.5.5_GH0/go.mod) = 19744
+SHA256 (go/security_openbao/openbao-openbao-v2.5.5_GH0/api/go.mod) = a7eee8079c1363319520de58246a48c1d493c281a35e2f3017de3e833aad5010
+SIZE (go/security_openbao/openbao-openbao-v2.5.5_GH0/api/go.mod) = 1639
+SHA256 (go/security_openbao/openbao-openbao-v2.5.5_GH0/api/auth/approle/go.mod) = 1d1f4c0dce9ce81e81aef6197df63c02a03f3ca776b7aee7897b312868ef5603
+SIZE (go/security_openbao/openbao-openbao-v2.5.5_GH0/api/auth/approle/go.mod) = 1028
+SHA256 (go/security_openbao/openbao-openbao-v2.5.5_GH0/api/auth/kubernetes/go.mod) = b4502d9c68613dc95806e73524a38182aabc6e53478e259c49e740b30ad1e01a
+SIZE (go/security_openbao/openbao-openbao-v2.5.5_GH0/api/auth/kubernetes/go.mod) = 1031
+SHA256 (go/security_openbao/openbao-openbao-v2.5.5_GH0/api/auth/userpass/go.mod) = 9ed26f361d51f94f7bafc5796ce3d5f587bfdf4546c1e4167031c5b8edc43b96
+SIZE (go/security_openbao/openbao-openbao-v2.5.5_GH0/api/auth/userpass/go.mod) = 1029
+SHA256 (go/security_openbao/openbao-openbao-v2.5.5_GH0/helper/stubbolt/go.mod) = 499d18c33116c7dc7eef3826284345521d42bd38435a7c7d331e94fa3c8d1aa2
+SIZE (go/security_openbao/openbao-openbao-v2.5.5_GH0/helper/stubbolt/go.mod) = 41
+SHA256 (go/security_openbao/openbao-openbao-v2.5.5_GH0/sdk/go.mod) = 0e34d5bfbd231ff37c2b2731663ba65cb1e866218370b0799e99c4883cceef63
+SIZE (go/security_openbao/openbao-openbao-v2.5.5_GH0/sdk/go.mod) = 5177
+SHA256 (go/security_openbao/openbao-openbao-v2.5.5_GH0/openbao-openbao-v2.5.5_GH0.tar.gz) = 809046e84e5c9bea9bf1e5347708f25c7549735c662ccc8fbb1dfb136df29265
+SIZE (go/security_openbao/openbao-openbao-v2.5.5_GH0/openbao-openbao-v2.5.5_GH0.tar.gz) = 25406624