CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

devel/maven 3.9.16

Java project management tool

Port info

Maintainer
michaelo@apache.org
Packages
latest: 3.9.16
Upstream
up to date
Last update
to 3.9.16 · 0808aa77e5
Quarterly
2026Q4: 3.8.9_3
WWW
https://maven.apache.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install maven
installs 3.9.16 from latest; from quarterly (2026Q4) 3.8.9_3
Port
# cd /usr/ports/devel/maven && make install clean
Size
8.5 MiB download · 10 MiB installed
Depends on
devel/maven-wrapper 2, java/openjdk25 25.0.4+7.f.1_1
License
APACHE20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.9.163.9.16–
FreeBSD 153.9.163.9.16–
FreeBSD 143.9.163.8.9_33.9.16

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.8.9_33.8.9_3–
FreeBSD 143.8.9_33.8.9_33.8.9_3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.9.16.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (47)

Michael Osipov (michaelo) · 3.9.16
devel/maven: Bump default version to 3.9

devel/maven will now point to devel/maven39.
0808aa77e5
Michael Osipov (michaelo) · 3.8.9_3
devel/maven: Make unversioned port a metaport
982c73d513
Michael Osipov (michaelo)
devel/maven: Move port to devel/maven38

In prepration of a metaport 'devel/maven' this will live side-by-side
with devel/maven39.
5447ca06f6
Ronald Klop (ronald) · 3.8.9_2
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 3.8.9_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Michael Osipov (michaelo) · 3.8.9
devel/maven: Update port to 3.8.9

Approved by:	otis (mentor)
Changelog:	https://maven.apache.org/docs/3.8.9/release-notes.html
2d03a84392
Muhammad Moinur Rahman (bofh) · 3.8.8_1
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Koichiro Iwao (meta) · 3.8.8_1
devel/maven: improve port for multiple parallel versions

PR:		272899
a1c897de33
Nuno Teixeira (eduardo) · 3.8.8
devel/maven: Update to 3.8.8

ChangeLog:	https://maven.apache.org/docs/3.8.8/release-notes.html
PR:		270418
cd2d445520
Nuno Teixeira (eduardo) · 3.8.7
devel/maven: Update to 3.8.7

ChangeLog:	https://maven.apache.org/docs/3.8.7/release-notes.html
PR:		268659
MFH:		2023Q1 (bugfixes)
86cf9e1611
Stefan Eßer (se) · 3.8.6
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.8.6
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Kurt Jaeger (pi) · 3.8.6
devel/maven-wrapper: massively update port, align with devel/maven

- Submitter changes MAINTAINER to his @apache.org address
- Bump version to 2
- Use ETCDIR wherever possible
- Also install mvnDebug
- Burry long dead M2_HOME in favor of MAVEN_HOME which
  will *never* be propagated

PR: 265028, 265025
5f0ee47286
Po-Chuan Hsieh (sunpoet) · 3.8.6
devel/maven: Update WWW

Approved by:	portmgr (blanket)
61938cb6ea
Neel Chauhan (nc) · 3.8.6
devel/maven: update to 3.8.6

PR:	264790
22dbef930d
Yasuhiro Kimura (yasu) · 3.8.5
devel/maven: Update to 3.8.5

* Pass maintainership to submitter. Both current maintainer and
  submitter agree with it. MAINTAINER is set to submitter's mail
  address in apache.org.
* While I'm here, pet portclippy.

PR:		262551
Approved by:	maintainer
9ad3ccf683
Guangyuan Yang (ygy) · 3.8.4
devel/maven: Update to 3.8.4

Changelog:	https://maven.apache.org/docs/3.8.4/release-notes.html

PR:		260198
Approved by:	Jonathan Chen <jonc@chen.org.nz> (maintainer)
3aff9305be
Guangyuan Yang (ygy) · 3.8.3
devel/maven: Update to 3.8.3

Changelog:	https://maven.apache.org/docs/3.8.3/release-notes.html

PR:		258915
MFH:		2021Q4 (bugfix releases)
Reviewed by:	Michael Osipov <michael.osipov@siemens.com>
a7816892dd
Kevin Bowling (kbowling) · 3.8.1
devel/maven: update to 3.8.1

This is not just a bugfix as it contains three features that cause a change of
default behavior (external HTTP insecure URLs are now blocked by default): your
builds may fail when using this new Maven release, if you use now blocked
repositories. Please check and eventually fix before upgrading.

Changes http://maven.apache.org/docs/3.8.1/release-notes.html

PR:		255161
Approved by:	Jonathan Chen <jonc@chen.org.nz> (maintainer)
Security:	CVE-2021-26291
		CVE-2020-13956
887cfadcdf
Mathieu Arnold (mat) · 3.6.3
Remove # $FreeBSD$ from Makefiles.
305f148f48
Kurt Jaeger (pi) · 3.6.3
devel/maven: upgrade 3.6.1 -> 3.6.3

PR:		242489
Submitted by:	Jonathan Chen <jonc@chen.org.nz> (maintainer)
Relnotes:	http://maven.apache.org/docs/3.6.2/release-notes.html
		http://maven.apache.org/docs/3.6.3/release-notes.html
cbef376909
Jung-uk Kim (jkim) · 3.6.1_1
Clean up after java/openjdk6 and java/openjdk6-jre removal

java/openjdk6 support was removed from Mk/bsd.java.mk (r512662) and
java/openjdk6 and java/openjdk6-jre were removed from the ports tree
(r512663).  Now this patch completely removes remaining stuff from the
ports tree.

PR:			241953 (exp-run)
Reviewed by:		glewis
Approved by:		portmgr (antoine)
Differential Revision:	https://reviews.freebsd.org/D22342
5a52a08234
Steve Wills (swills) · 3.6.1
devel/maven: Update to 3.6.1

PR:		237916
Submitted by:	Jonathan Chen <jonc@chen.org.nz> (maintainer)
4d4d4610f9
Koichiro Iwao (meta) · 3.6.0
devel/maven: Update to 3.6.0

PR:		233966
Submitted by:	Jonathan Chen <jonc@chen.org.nz>
Approved by:	mentors (implicit)
Relnotes:	https://maven.apache.org/docs/3.6.0/release-notes.html
Sponsored by:	HAW International, Inc.
a135708ed5
Steve Wills (swills) · 3.5.4
devel/maven: update to 3.5.4

PR:		229353
Submitted by:	Jonathan Chen <jonc@chen.org.nz> (maintainer)
ae8a9b9d32
Kirill Ponomarev (krion) · 3.5.3
Update to 3.5.3

PR:		227757
Submitted by:	maintainer
88cc3519e1
Kurt Jaeger (pi) · 3.5.2
devel/maven: update 3.5.0 -> 3.5.2

PR:		225656
Submitted by:	Jonathan Chen <jonc@chen.org.nz> (maintainer)
Relnotes:	https://maven.apache.org/docs/3.5.2/release-notes.html
9d874f19f7
Matthew Seaman (matthew) · 3.5.0
Partially revert r446612 -- remove the CONFLICTS_INSTALL lines, because these ports do not actually conflict.

PointyHat to: me

Reported by:	jonc@chen.org.nz
3f429a08be
Matthew Seaman (matthew) · 3.5.0
New port: devel/maven -- maven-3.5.0

svn cp from devel/maven33

Apache Maven is a software project management and comprehension tool. Based on
the concept of a project object model (POM), Maven can manage a project's
build, reporting and documentation from a central piece of information.

WWW: http://maven.apache.org/

Add CONFLICTS_INSTALL for devel/maven3, devel/maven31, devel/maven33[1]

PR:		220959
Submitted by:	jonc@chen.org.nz
Approved by:	[1] portmgr blanket
97d2f001c1
Renato Botelho (garga)
Remove expired port

2010-10-01 devel/maven: Development has been ceased, superseded by devel/maven2.
88255945cb
Martin Wilke (miwi) · 1.0.2_2
- Mark as Deprecate (Note that no further development is planned for the Maven-1.0 branch)

PR:		149429
Submitted by:	"Simon Olofsson" <simon@olofsson.de>
5e3270e3a2
Mark Linimon (linimon) · 1.0.2_2
Reset long-time inactive maintainer jbq@caraldi.com due to maintainer timeouts.
9fe67e143b
Edwin Groothuis (edwin) · 1.0.2_2
Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)
090059a210
Florent Thoumie (flz) · 1.0.2_1
- Welcome X.org 7.2 \o/. - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}.
d4f0d0048a
Herve Quiroz (hq) · 1.0.2
- Use new features from javavmwrapper 2.2 to set a default value for JAVA_HOME - Set a default value for MAVEN_HOME only when not already defined - Update pkg-message to reflect these changes

PR:		96659
Submitted by:	hq
Approved by:	maintainer
be3bdc1dec
Herve Quiroz (hq) · 1.0.2
- Transfer maintainership - Automatically set MAVEN_HOME [1]

PR:		95174
Submitted by:	Jean-Baptiste Quenot <jbq@caraldi.com> (new maintainer) [1]
Approved by:	maintainer
38f5885a5f
Edwin Groothuis (edwin) · 1.0.2
SHA256ify

Approved by:    krion@
acd87b4ad8
Herve Quiroz (hq) · 1.0.2
Update to 1.0.2

PR:		78018
Submitted by:	me
Approved by:	maintainer
7dfbd70fdd
Herve Quiroz (hq) · 1.0.1
- Update to 1.0.1

PR:		74290
Submitted by:	me
Approved by:	maintainer
963a31641e
Herve Quiroz (hq) · 1.0
- Update to 1.0 final [1] - Use MASTER_SITE_APACHE - Use DATADIR - Install files using INSTALL_* [2]

PR:		ports/68769
Submitted by:	Rui Lopes (maintainer) [1]
Reviewed by:	vs [2]
Approved by:	maintainer, glewis (mentor)
39214bece7
Thierry Thomas (thierry) · 1.0.r2
1. Update maven to 1.0-rc2 2. Set USE_BZIP2=yes 3. Convert to bsd.java.mk 2.0 macros 4. Use alternative path in pkg-message

PR:		ports/65703
Submitted by:	Kang Liu <liukang@bjpu.edu.cn>
Reviewed by:	maintainer.
29e0285216
Trevor Johnson (trevor) · 1.0.r1_1
SIZEify (maintainer timeout)
8232e82f85
Joe Marcus Clarke (marcus) · 1.0.r1_1
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 2)
053fdb6a6b
Trevor Johnson (trevor) · 1.0.r1
Use the CPIO macro defined in bsd.port.mk.
439b8a040c
Joe Marcus Clarke (marcus) · 1.0.r1
Add a bit on using Maven with a proxy.

Submitted by:	maintainer
6bfe18a3d2
Joe Marcus Clarke (marcus) · 1.0.r1
Replace spaces with tabs on one line.

Submitted by:	maintainer
271d27b3e3
Joe Marcus Clarke (marcus) · 1.0.r1
Add maven a Java project management and project comprehension tool.  More details are available at http://maven.apache.org.

PR:		58339
Submitted by:	Rui Lopes <rui@ruilopes.com>
246afb20c1